Cortex Cloud content - The type of content in Cortex Cloud - Administrator Guide - Cortex XSIAM - Cortex CLOUD - Cortex - Security Operations

Cortex Cloud Posture Management Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Posture Management
Creation date
2025-01-22
Last date published
2026-06-04
Category
Administrator Guide
Abstract

The type of content in Cortex Cloud

In Cortex Cloud, content includes individual content entities that you create such as individual playbooks and scripts, preinstalled content packs, and content packs that are downloaded from Marketplace when you adopt and edit playbooks.

Content packs are created by Palo Alto Networks and technology partners. Content in Marketplace is organized into content packs to support specific security orchestration use cases.

You can view your installed Marketplace content packs from within Cortex Cloud.

In Cortex Cloud, content includes the following:

Content

Description

Actions

Actions wrap diverse capabilities (such as playbooks, scripts, and commands) to make them accessible and executable by an agent.

Integrations

Integrations allow you to respond to events and perform actions on third-party security and alert management vendors.

Playbooks

You can automate many security processes, including handling investigations and managing tickets and security responses that were previously handled manually.

Scripts

Perform specific actions and are comprised of commands, which are used in playbook tasks and when running commands in the issue War Room.