Who are Expander APIs for? - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-26
End_of_Life
EoL
Category
User Guide
Abstract

Multiple teams within IT use Cortex Xpanse’s APIs.

Multiple teams within IT use Cortex Xpanse’s APIs. Teams include:

  • SOC—To integrate Cortex Xpanse Expander data with the security ecosystem, such as SIEM, Threat Feeds, and Analytics.

  • Incident Response (IR)—To pull in data for forensic analysis.

  • IT Operations—To use data to validate and help manage the IT infrastructure footprint.

  • AppDev—To keep tabs on AppDev resources exposed externally.

  • Compliance—To track the exposure of regulated assets, such as assets that contain PCI or HIPAA sensitive data.