Cortex Cloud POV / Sandbox Environment

This code repo contains a complete GCP and GitHub environment that automates the process of creating cloud assets, onboarding the cloud account to Cortex Cloud, creating an asset group, building K8s and Linux XDR installation packages, installing XDR onto endpoints, and creating security cases. This template has been tested with and works with Torque provisioned cloud accounts.

Note

This code repo works as-is, but is currently lacking some documentation on how to deploy. Stay tuned!

1. Use the Template
2. GCP Setup Instructions
3. Cortex Setup Instructions
4. Running Workflows

Use the Template

Important

This setup only works with 1.3 release or later of Cortex Cloud

This first step is optional, but if you are supporting multiple environments having separate organizations can be helpful but is not required.

1. (Optional) Create a GitHub Organization

Tip

Select the free tier

2. Clone this repo into your new organization
   • Use this template -> create a new repository

Warning

If you created a new Organization. make certain you deploy this template in your new organization and not your GitHub account

3. Follow the GCP and Cortex Setup Instructions

4. Run workflows to complete the setup