You can configure collecting Snowflake data using a Cloud Posture and Runtime Security data source or connector (onboarded after July 26, 2026):
| Collection Method | Description |
| ------------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
| Cloud Posture and Runtime Security data source overview | Forward Snowflake data to Cortex XSIAM using the Snowflake data source. |
| Link to Cloud Posture and Runtime Security data source instructions | [How to onboard Snowflake](snowflake/how-to-onboard-snowflake) |
| Link to connector (onboarded after July 26, 2026) | [Snowflake Automation and Collection](snowflake/snowflake-automation-and-collection) |