Investigate Child Tenant Data

For managed security providers, you can view, track, and investigate data across your Cortex XDR child tenants.
With
Cortex
XDR
managed security, you can investigate the
Cortex
XDR
child tenant data.
By default,
Cortex
XDR
displays data for your tenant. To display data for of your child tenant, select the tenant from the drop-down.
Some common tasks that you might perform include:
  • Investigate incidents on a child tenant.
  • Investigate alerts on a child tenant.
  • Run an XQL Query API on your local and child tenants.

Recommended For You