Docker - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Docker is a software framework for building, running, and managing containers.

Cortex XSIAM maintains a repository of Docker images, available in the Docker hub under the Cortex organization. You can also access the Docker images through the Cortex Container Registry.

Each Python/PowerShell script or integration has a specific Docker image listed in the YAML file. When the script or integration runs, if the specified Docker image is not available locally, it is downloaded from the Docker hub or the Cortex Container Registry. The script or integration then runs inside the Docker container. For more information on Docker, see the Docker documentation and Using Docker.