Skip to main content

Cohesity Helios

Download With Dependencies

This integration interacts with Cohesity Helios and performs actions based on alerts raised.

Cohesity Helios, a next-gen data management platform, delivers a unique combination of an immutable file system with DataLock capabilities, anomaly detection, policy-based data isolation, quorum and MFA to prevent backup data from becoming part of a ransomware attack.

This content pack from Cohesity provides Cortex XSOAR customers with alerts by integrating ransomware detection into an automated playbook for managing ransomware attack recovery to help reduce ransomware risk.

Protect Backup

Cohesity’s comprehensive, end-to-end solution Cohesity Ransomware features a multi-layered approach to protect backup data against ransomware, detect, and rapidly recover from an attack. Cohesity’s unique immutable architecture ensures that your backup data cannot be encrypted, modified or deleted. Using machine learning, it provides visibility and continuously monitors for any anomalies in your data. And if the worst happens, Cohesity helps to locate a clean copy of data across your global footprint, including public clouds, to instantly recover and reduce downtime.

Reduce Downtime

What does this pack provide?

  • Cohesity Helios and Cortex XSOAR enable your security and IT teams to recover from ransomware attacks.

  • Command to fetch ransomware alerts based on attributes such as time duration, severity level, cluster identifiers and region identifiers.

  • Command to restore a specified backed up object from its latest clean snapshot.

  • Command to ignore a specified ransomware alert.


Cohesity Inc.


Cortex XSOARCortex XSIAM


CertificationRead more
Supported ByPartner
CreatedOctober 4, 2021
Last ReleaseJuly 25, 2023

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.