About XDR Cloud Compliance

[Chilla]

Hello dear community, 

We noticed a feature called Cloud Compliance on Cortex XDR,  but we don't see any details.

What is this feature related to and from where to collect data?

Is there any documentation available about this feature since I couldn't find any related instructions in the help center?

Thanks.

[Chilla]

Hello dear community, 

We noticed a feature called Cloud Compliance on Cortex XDR,  but we don't see any details.

What is this feature related to and from where to collect data?

Is there any documentation available about this feature since I couldn't find any related instructions in the help center?

Thanks.

[neelrohit · Accepted solution]

Hi @Chilla ,

Thank you for writing to live community!

Cloud compliance is a feature which performs CIS benchmarking compliances check on the endpoint resources for linux and kubernetes agents. Though it is designed for cloud based linux assets and kubernetes hosts mainly, it is also capable of giving the same metric data for on prem linux appliances. As a result it gives you an overview of violations in terms of Cloud Security posture on your linux boxes in terms of linux and container compliances and also for kubernetes(in case if you have one).

To get the data, you need to enable “enable cloud compliance collection” under “XDR Pro” in Linux agent settings profile. The endpoints should have this data collection enabled for around 12 hours time to set the benchmarks and then your list should be populated.

Screenshot attached. Hope this helps

Please mark the response as “Accept as Solution” if it answers your query.