Behavioral indicators of compromise (BIOCs) define specific atomic behaviors across processes, registry, files, and network activity, enabling the system to trigger alerts when those behaviors are observed.

Temporal profiling allows the analytics engine to compare an entity's behavior against its own historical behavior over different time periods using statistical methods.

Access Management in Cortex XDR tenant settings is where administrators grant new non-SSO users access.

Cortex XSIAM content packs can include Analytics alerts and Data Model rules to expand detection and monitoring capabilities.

WildFire is a cloud-based sandbox and malware analysis engine used by Cortex XDR to detect and classify unknown threats.