Working with content packs When a specific threat situation occurs, respond immediately by importing and installing the relevant content pack from the rules server. Content packs contain use-case driven correlation rules, alarms, views, reports, variables, and watchlists to address specific malware or threat activity. Save time by using content packs instead of developing tools in-house. Search the McAfee content pack catalog. Importing content packsContent packs are typically downloaded as part of automatic rules updates. If your ESM does not automatically download rules and content packs, use this manual process. Install content packs Select a content pack and deploy it. Modify content packs Update or uninstall a content pack.