Cortex XDR provides features to automate repetitive analytical and threat-hunting tasks. The Schedule Query feature allows an analyst to configure a specific XQL query to run automatically at predefined intervals (e.g., hourly, daily, weekly). This automates the execution of routine checks. The Query Library enables analysts to save, manage, and reuse complex or frequently used queries. By saving a query, the repetitive task of rewriting it is eliminated, thereby automating a key part of the analysis workflow. These two features work together to streamline and automate recurring investigations.
