Cortex

[Charles Herring]

CORTEX CONFIGURATION

Generate API key as detailed here: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-api/cortex-xdr-api-overview/get-started-with-cortex-xdr-apis

PRECINCT CONFIGURATION

• Go to Admin > SOAR > Cortex XDR API > Config
• Click the checkbox for Enable Cortex Detection API
• Paste the API Key ID and the API Key
• Click the disk icon (Save)
• Click Jobs and go to Artifacts from Cortex XDR
• Select Triggers, expanding Manual Trigger and Interval Trigger. 
  • Toggle both to State: ENABLED
• The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization.
• Click the disk icon (Save)

 

[Author]

Posts