Cortex Toolbox
Kitlist Builder
Ingest Calculator
Content ▾
Packs
Integrations
Playbooks
Scripts
Incident Types
Incident Fields
Classifiers
Layouts
Parsing Rules
Correlation Rules
Modeling Rules
Reputation Commands
Threat Feeds
Docs ▾
Documentation
Analytics Alerts
XDM Explorer
Settings ▾
Show test playbooks
Show deprecated content
Sign in
Content Packs
/ Cisco AMP
Cisco AMP
v2.1.16
Uses CISCO AMP Endpoint
Author:
Cortex XSOAR
Support:
xsoar
URL:
https://www.paloaltonetworks.com/cortex
Default data source:
CiscoAMPEventCollector
agentix
xsiam
Endpoint
Integrations
(3)
AMP
AMPv2
CiscoAMPEventCollector
Modeling rules
(1)
AMP Modeling Rule