The type of content in Cortex XDR
In Cortex XDR, content includes individual content entities that you create such as individual playbooks and scripts, preinstalled content packs, and content packs that are downloaded from Marketplace when you adopt and edit playbooks.
Content packs are created by Palo Alto Networks and technology partners. Content in Marketplace is organized into content packs to support specific security orchestration use cases.
You can view your installed Marketplace content packs from within Cortex XDR.
In Cortex XDR, content includes the following:
Content | Description |
|---|---|
Integrations | Integrations allow you to respond to events and perform actions on third-party security and alert management vendors. |
Playbooks | You can automate many security processes, including handling investigations and managing tickets and security responses that were previously handled manually. |
Scripts | Perform specific actions and are comprised of commands, which are used in playbook tasks and when running commands in the issue War Room. |