Cortex XDR Cloud Compliance

[Vinothkumar_SBA]

Hi Community,

We have enabled the Cortex XDR agent Cloud Compliance on certain Linux machines. The configuration was successfully completed, and the Cloud Compliance tab is visible. We are interested in retrieving the Cloud Compliance data using an XQL query. Could you please provide guidance on the type of query to use for retrieving this data in Cloud Compliance through XQL?

[aspatil · Accepted solution]

Hello @Vinothkumar_SBA ,

Thanks for reaching out on LiveCommunity!

Since the dataset is not currently exposed, you cannot retrieve the data using XQL.

If you feel this has answered your query, please let us know by clicking on Like and "mark this as a Solution".

[Vinothkumar_SBA]

Hi Aspatil,

Thanks for your response. I have one more doubt: is it possible to perform a database lookup in Cortex XDR to retrieve Cloud Compliance data using an XQL query?