Use an existing rule to create a new Custom Detection Rule ↗

  1. Navigate to Posture Management → Rules & Policies → Rules → Cloud Workload.

  2. In the Cloud Workload Rules page, click the policy you want to enable or disable.

  3. In the Details page, click the More Options icon (⋮) and then select Save as new.

  4. Modify the fields as required.

  5. Click Create to create the new custom detection rule.