Platform Changes

Everything that moved across Cortex — the documentation, the analytics rules, and the content packs.

Covering August 18, 2026, 00:00–24:00 UTC · published August 19, 2026 03:50 UTC.

Last checked about 4 hours ago. Summaries are written by claude-code/claude-opus-5; the changes themselves are recorded automatically.

Documentation

47 pages changed +99 −129

Unlinking every issue deletes the case; XDR agent 9.3 and 9.2 added to the mobile support tables

Linking issues to cases gains a warning: unlink the last issue and the case itself is deleted.
Mobile operating systems supported with Cortex XDR adds Cortex XDR agent 9.3 and 9.2 columns to both the Android and the iOS/iPadOS table.
CSP onboarding now lists manual onboarding for Azure alongside AWS and GCP, and renames the automated path to Infrastructure as Code.
The remaining two changes are housekeeping: a duplicated icon table removed and a link title typo fixed.
Five pages in total, none added, removed or renamed.

0 rules changed +0 −0

Synced, and nothing changed upstream.

22 packs changed +3855 −1874

Confluence Cloud gains OAuth and deprecates v1 commands; identity.* modeling rules both land and revert

Atlassian Confluence Cloud is the day: +2,969/-439 lines for new OAuth authentication and v2 commands, with the v1 commands deprecated (#45378).
The identity.* modeling-rule series moves in both directions — PR 6 of 7 lands (#45461) while PR 2 of 7 is reverted (#45558).
Four packs shrink sharply: GuardiCore (-963), Silverfort (-178), CommvaultBackupSolutions (-121) and CitrixADC (-112).
Five packs are addition-only, led by MicrosoftWindowsEvents (+318), and seven more carry an identical +9/-2 bump.

BIOC rules are not tracked yet — that sync signs in to a live Cortex tenant, so there is nowhere for an unattended daily export to run.