About XDR Cloud Compliance

Chilla — Wed, 12 Jul 2023 02:34:47 GMT

Hello dear community,

We noticed a feature called Cloud Compliance on Cortex XDR, but we don't see any details.

What is this feature related to and from where to collect data?

Is there any documentation available about this feature since I couldn't find any related instructions in the help center?

Thanks.

Re: About XDR Cloud Compliance

neelrohit — Wed, 12 Jul 2023 08:03:23 GMT

Hi @Chilla ,

Thank you for writing to live community!

Cloud compliance is a feature which performs CIS benchmarking compliances check on the endpoint resources for linux and kubernetes agents. Though it is designed for cloud based linux assets and kubernetes hosts mainly, it is also capable of giving the same metric data for on prem linux appliances. As a result it gives you an overview of violations in terms of Cloud Security posture on your linux boxes in terms of linux and container compliances and also for kubernetes(in case if you have one).

To get the data, you need to enable “enable cloud compliance collection” under “XDR Pro” in Linux agent settings profile. The endpoints should have this data collection enabled for around 12 hours time to set the benchmarks and then your list should be populated.

Screenshot attached. Hope this helps

Please mark the response as “Accept as Solution” if it answers your query.

topic About XDR Cloud Compliance in Cortex XDR Discussions

About XDR Cloud Compliance

Re: About XDR Cloud Compliance