Context data - Use context data to assist with the investigation and remediation process. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-11
Category
Administrator Guide
Abstract

Use context data to assist with the investigation and remediation process.

Context data is a map (dictionary) that stores structured data related to an issue, including issue fields and automations data. You can use context data to pass data between playbook tasks, and create scripts that map data into case and issue fields.