View generating BIOC or IOC rule - You can view the BIOC or IOC rules that generated issues directly from the Issues table. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide
Abstract

You can view the BIOC or IOC rules that generated issues directly from the Issues table.

You can easily view and edit the BIOC and IOC rules that generated issues directly from the Issues table:

  1. From the Issues page, locate issues with Detection methods: XDR BIOC and XDR IOC.

  2. Right-click the row, and select Manage Issue → View generating rule.

    Cortex XSIAM opens the BIOC rule that generated the issue in the BIOC Rules page. If the rule has been deleted, an empty table is displayed.

  3. Review the rule, if necessary, right-click to perform available actions.