Palo Alto Cortex
Bring Palo Alto Cortex XDR incidents into DataOS
This guide brings your company's Palo Alto Cortex XDR incidents (the security incidents raised in your Cortex XDR) into DataOS.
paloaltonetworks.com
?
What you need
An API key, its key ID and your tenant address
Who can get it
A Cortex XDR administrator
Where data lands
A governed table in your DataOS lakehouse
Connection type
REST API
How the connection works
?
Source
Palo Alto Cortex
DataOS connector
Keeps it up to date
DataOS lakehouse
Governed data product
The connector uses your Cortex key to ask your Cortex tenant for its incidents and refreshes the table in DataOS. It only reads incidents.
What's next
Ready to bring this data into DataOS?
