Platform Changes

Everything that moved across Cortex — the documentation, the analytics rules, and the content packs.

Covering September 04, 2026, 00:00–24:00 UTC · published September 05, 2026 07:23 UTC.

Last checked about 8 hours ago. Summaries are written by claude-code/claude-opus-5; the changes themselves are recorded automatically.

Documentation

3 pages changed +10 −12

The FedRAMP caveat on AWS CloudTrail ingestion is dropped; SaaS AI agent onboarding links resolve

  • AWS CloudTrail loses the paragraph advising against ingesting data from an AWS commercial environment into a FedRAMP-certified Cortex XSIAM tenant.
  • SaaS AI Agent Security replaces all eight broken-reference placeholders on the onboarding index with real per-platform paths.
  • Nothing else moved: the only other change is a wording tweak to the Attack Surface Management overview’s description.
  • Onboard SaaS AI Agents
  • Ingest audit logs from AWS CloudTrail
  • Learn about Attack Surface Management

See what changed →

Analytics rules

0 rules changed +0 −0

Synced, and nothing changed upstream.

Content packs

0 packs changed +0 −0

Synced, and nothing changed upstream.

BIOC rules are not tracked yet — that sync signs in to a live Cortex tenant, so there is nowhere for an unattended daily export to run.