XSIAM Usecases on EPIC EHR ( Electronic Health Record) log

A.Velusamy — Thu, 02 Jul 2026 14:48:25 GMT

Hi All,

Has anyone built detection use cases for EPIC log sources? If so, I'd appreciate any insights you can share.

Re: XSIAM Usecases on EPIC EHR ( Electronic Health Record) log

H.Eldessouki — Sat, 04 Jul 2026 19:33:25 GMT

Haven't seen published use cases for EPIC specifically ,niche enough source that there's no canned content for it. If you're pulling the audit logs in via HTTP Collector/syslog, treat it like any sensitive-access log: correlation rules around break-glass/emergency access, after-hours record pulls, one user pulling an abnormal volume of records, and access to VIP/employee-as-patient records (the classic healthcare insider-threat pattern). Nothing here needs EPIC-specific awareness, just the log fields once they're parsed.

topic Re: XSIAM Usecases on EPIC EHR ( Electronic Health Record) log in Cortex XSIAM Discussions

XSIAM Usecases on EPIC EHR ( Electronic Health Record) log

Re: XSIAM Usecases on EPIC EHR ( Electronic Health Record) log