Use an existing rule to create a new one - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide

To create a new cloud security rule using an existing rule:

  1. Navigate to Posture Management → Rules & Policies → Rules → Cloud Security.

  2. From the Rules page, there are two ways to access the option:

    1. Right-click the entry and then select Save as New.

    2. Click on the rule. Next, on the Details page, click the more options icon (⋮) and then select Save as New.

  3. Modify the Rule Name, Description, and Labels fields as necessary.

  4. Select the rule logic as needed.

  5. Click Done to save the new custom policy.