Cloud Security

Sub-topics

• Monitor and track compliance adherence
  • Choose compliance standards from the compliance catalog
    • Standards catalog
    • Controls catalog
    • Use a built-in or custom standard
    • Use a built-in or custom control
    • Create a new custom detection rule
  • Use an assessment profile to run compliance checks on your assets
    • Configuring assessments for custom compliance standards based on custom cloud security rules
  • View and manage compliance assessments and reports
    • Review assessments
    • Review reports
  • Compliance Overview Dashboard
• Cloud security rules and policies
  • Cloud security rules
  • Cloud security policies
  • Create and manage cloud security rules
    • Create a graph rule
    • Create a configuration rule
    • Create a data rule
    • Create an identity rule
    • Create a network exposure rule
    • Create an AI rule
    • Create an attack path (legacy) rule
    • View cloud security rule status
    • Edit a cloud security rule
    • Enable or disable a rule
    • Use an existing rule to create a new one
    • Delete a custom cloud security rule
  • Create and manage cloud security policies
    • Create a cloud security policy
    • Edit a cloud security policy
    • Enable or disable a policy
    • Use an existing policy to create a new one
    • Delete a custom cloud security policy
• Cloud Data Classification
  • How to create and validate a custom data pattern
    • Custom data patterns: Guardrails and syntax guide
  • How to disable and enable data patterns in Data Classification
  • How to create and validate a custom data profile
  • How to disable and enable data profiles in Cloud Data Classification
  • How to report a false positive in Cloud Data Classification
  • Topic classification
• Cloud Identity Security
  • What is Cloud Identity Security?
  • Review and improve your Identity Security posture
  • How does Effective Permission Calculation work?
  • Cloud Identity Security functionality
  • Configure Cloud Identity Security
  • Unified Human Identities
  • Achieve the principle of least privilege access
  • Explore permissions using the simple and advanced access tables
  • Create a custom detection rule in Cloud Identity Security
  • Perform advanced Identity Security investigations using XQL
  • Ingest logs and data from Okta
  • Enable inactive human identity logs on Azure in Cloud Identity Security
  • Manage RBAC and SBAC in Cloud Identity Security
• Network exposure detection
  • What is Cloud Network Analyzer?
  • Internet exposure detection
  • Outbound exposure detection
  • East-west exposure detection
  • Investigate an internet exposure
  • Configure trusted IPs
• Cortex Cloud SaaS Security
  • Setup SaaS Security
  • Connect a SaaS application
    • Onboard Asana
    • Onboard Atlassian
    • Onboard Automox
    • Onboard Businessmap
    • Onboard Celonis
    • Onboard Cisco Duo
    • Onboard Cisco Meraki
    • Onboard ClickUp
    • Onboard Contentful
    • Onboard Couchbase
    • Onboard Coveo
    • Onboard Databricks
    • Onboard Datadog
    • Onboard Gainsight PX
    • Onboard Grammarly
    • Onboard Harness
    • Onboard Intercom
    • Onboard Jamf Pro
    • Onboard JumpCloud
    • Onboard Kustomer
    • Onboard Microsoft Entra ID
    • Onboard Monday.com
    • Onboard MongoDB Atlas
    • Onboard MuleSoft
    • Onboard Mural
    • Onboard Office 365
    • Onboard Okta
    • Onboard PagerDuty
    • Onboard Redis Labs
    • Onboard Salesforce
    • Onboard SAP Ariba
    • Onboard Sentry
    • Onboard ServiceNow
    • Onboard Shopify
    • Onboard Slack Enterprise
    • Onboard Sumo Logic
    • Onboard Workday
    • Onboard Wrike
    • Onboard YouTrack
  • SaaS Security Overview
  • SaaS Security Checks
  • Provider Instances Security Check
  • Detection Rules
  • Remediation Actions
  • Create and monitor tickets
  • SaaS AI Agent Security
    • Setup SaaS Security for AISPM
    • Onboard SaaS AI Agents
      • Onboard Atlassian Rovo
      • Onboard Box AI Agents
      • Onboard ChatGPT Enterprise
      • Onboard Cursor Enterprise
      • Onboard Gemini Enterprise
      • Onboard M365 Copilot
      • Onboard Microsoft Copilot Studio
      • Onboard Service Now
    • Manage SaaS AI Agents
      • View AI Agents
      • View Datasets
      • View Agent Tools
• Cortex Cloud AI Security
  • What is Cortex Cloud AI Security?
  • Supported services in Cortex Cloud AI Security
  • Cortex Cloud AI Security concepts
  • Cortex Cloud AI Security use cases
  • How to perform advanced AI Security investigations using XQL
• Serverless function posture security
  • Onboard cloud providers for serverless functions
  • Serverless function posture rules
    • Manage serverless function rules
    • Create serverless function rules
    • Create an attack path rule for serverless functions
    • Create a configuration rule for serverless functions
    • Create a network exposure rule for serverless functions
  • Serverless function posture policies
    • Manage serverless function policies
    • Create serverless function policies
  • Serverless function usage
• Cortex Cloud Application Security
• Cloud workload policies and rules
  • How policies and rules work together
  • Cloud workload policies
    • Types of cloud workload policies
      • Trusted image cloud workload policies
    • Cloud Workload Policies page
    • Enable or disable a cloud workload policy
    • Create a cloud workload policy
    • Use an existing policy to create a new cloud workload policy
    • Edit a cloud workload policy
    • Delete a cloud workload policy
    • Cloud workload preventive action
  • Cloud workload rules
    • Default (pre-defined) rules
    • Custom (user-defined) rules
    • Cloud Workload Rules page
    • Create a new custom detection rule
    • Use an existing rule to create a new custom detection rule
    • Edit a custom detection rule
    • Delete a custom detection rule
• Base image rules
  • Create a base image rule
  • Find the base image for an asset
• Web and API Security (WAAS)
  • Personas workflow
  • Secure your API landscape
    • Gain visibility and assess risk of API endpoints
    • Monitor and investigate API threats
    • Configure API security from end to end
      • Ingest AWS API Gateway
      • Ingest Azure APIM
      • Ingest Apigee Proxy
      • Ingest Kong
      • Ingest F5
      • Agent-based protection
        • Set up Web and API Security profiles
        • Apply Web and API Security profiles to workloads
        • Manage Web and API Security prevention profiles
        • Add a disable prevention rule for cloud workloads
        • Add a support exception rule for cloud workloads
        • Add a legacy exception rule for cloud workloads
        • Additional workload management tasks
    • API specification inventory
• Serverless function runtime security
  • Set up serverless function protection
  • Serverless runtime issues