Designed to assist security professionals with security investigations, threat hunting, and anomaly detection, leveraging Anthropic Claude's natural language conversational capabilities.
Anthropic Claude
- Details
- Content
- Dependencies
- Version History
Designed to assist security professionals with security investigations, threat hunting, and anomaly detection, leveraging Anthropic Claude's natural language conversational capabilities.
Integrations
| Name | Description |
|---|---|
| Anthropic Claude |
Modeling Rules
| Name | Description |
|---|---|
Anthropic Claude Modeling Rule |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
1.2.0 - 10610743 (June 30, 2026)
1.1.0 - 10411205 (June 23, 2026)
- 44681
Download
Integrations
Anthropic Claude
- Added event collection from the Anthropic Compliance API Activity Feed into Cortex XSIAM (vendor: anthropic, product: claude).
- Added the claude-get-events command to manually retrieve Activity Feed events.
- Added the following read-only Compliance API commands: claude-list-organizations, claude-list-organization-users, claude-list-roles, claude-list-role-permissions, claude-list-groups, claude-list-group-members, claude-list-chats, claude-list-chat-messages, claude-list-projects, claude-list-project-attachments, and claude-get-project-document.
- Added the Compliance Access Key configuration parameter, used for event collection and the Compliance API commands.
- Added the Organization UUID configuration parameter, used as the default organization for compliance commands when their org_uuid argument is not provided.
- Updated the API Key configuration parameter to be optional, so the integration can be configured with only the Compliance Access Key.
- Updated the Activity types parameter to accept a comma-separated list of Activity Feed types.
- Updated event collection to default to collecting the last minute of activity on the first fetch and to continue from the last collected event on subsequent fetches.
- Added newer Claude models (Claude Sonnet 4.5, Claude Opus 4.1, Claude Opus 4, Claude Sonnet 4, and Claude Haiku 4.5) to the Model configuration parameter options.
- Updated the pack to be supported by Cortex and available on the Cortex XSIAM and Cortex Platform marketplaces.
Pack
- Updated the pack to be supported by Cortex.
- 44681
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 7, 2025 | |
| Last Release | June 30, 2026 |