Everything that moved across Cortex — the documentation, the analytics rules, and the content packs.

Covering August 21, 2026, 00:00–24:00 UTC · published August 22, 2026 03:43 UTC.

Last checked about 2 hours ago. Summaries are written by claude-code/claude-opus-5; the changes themselves are recorded automatically.

Documentation

1 page changed +28 −8

SaaS Security ticketing moves to Run Automation; new Slack remediation route for SaaS Posture and AI Agent issues

  • A single page moved: Create and monitor tickets in Cortex Cloud SaaS Security.
  • The Jira/ServiceNow flow is rewritten — tickets now start from a right-click Run Automation on Cases and Issues, not from an issue’s Overview page.
  • A new Send issues to Slack for remediation section routes SaaS Posture and AI Agent issues to a Slack channel.
  • Linked tickets are now read from the issue’s War Room rather than from any issue view.
  • Remaining edits are wording: “SSPM console” becomes “Cortex console”, and the Prerequisites heading is demoted to bold.
  • Create and monitor tickets

See what changed →

Analytics rules

0 rules changed +0 −0

Synced, and nothing changed upstream.

Content packs

0 packs changed +0 −0

Synced, and nothing changed upstream.

BIOC rules are not tracked yet — that sync signs in to a live Cortex tenant, so there is nowhere for an unattended daily export to run.