Qualys Context XDR allows you to configure new rules and export them for circulation.
Follow these steps to export an existing rule:
1. First, on the Qualys Context XDR UI, navigate to the Rules sub-tab under the Rules tab.
2. From the Rule page, click the Export rule option from the rule’s Quick Actions menu.
3. On the Confirmation pop-up, click Export to export the rule to your local machine as a JSON file.
You can import this exported JSON file to automatically use a rule in other subscriptions.
To import a rule in JSON format, follow these steps:
1. First, on the Qualys Context XDR UI, navigate to the Rules sub-tab under the Rules tab.
2. On the Rules sub-tab, click Import Rule.
3. On the Import Rule pop-up, drag and drop, or browse and upload the rule in JSON format.
4. Finally, click Import to import the rule. The imported rule is displayed on the Rules sub-tab in the Active state.
- Activate Rules from the Rule Library