Edit a Custom Detection Rule - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Navigate to Posture Management → Rules & Policies → Rules → Cloud Workload.

In the Cloud Workload Rules page, click the rule you want to edit.

In the Details page, click the More Options icon (⋮) and then click Edit.

Make the necessary changes.

Click Update to save the changes.