Manage Global BIOC Rules

Get the latest global BIOC rules.
Navigate to
Detection & Threat Intel
Detection Rules
BIOC
.
To view the content details, hover over the status
Content up to date
, to show the global rules version number and last check date.
The content status displays the date when the content was last updated, either automatically or manually by an administrator.
If the status displays Could not check update, click the status to check for updates manually.
The last updated date changes when the download is successful.
Copy a global BIOC rule.
You cannot directly modify a global rule, but you can copy global rules as a template to create new rules.
Locate a Palo Alto Networks
Source
type rule, right-click and select
Save as New
.
Select
OK
to save the rule.
The rule appears in the BIOC Rules table as a user-defined
Source
type rule which you can edit.
Add a Rule Exception.
Although you cannot edit global rules, you can add exceptions to the rule, if needed.