Palo Alto

Where the vendor is paloalto, it's product is cortex_xdr. For Cortex XDR, right now we have three different product types/endpoints:

• alerts

• alerts_multi

• incidents

Inside each of those endpoints we have the YAML file to configure.