Navigation Cheat Sheet - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Out-of-the-box dashboards—Provide high-level statistics about your assets and incidents. Out-of-the-box dashboards include the Home, Attack Surface Management, Incident Management, Unmanaged Cloud, Security Rating, and Websites dashboards.

Other Dashboards—Additional out-of-the-box dashboards that aren't listed in the top-level dashboards menu, including Security Admin, My Overview, and Attack Surface Compliance Violations dashboards.

My Dashboards—Custom dashboards that you created.

Dashboards Manager—Add new dashboards with customized widgets to surface the statistics that matter to you most

Widget Library—Search, view, edit, and create widgets based on predefined widgets and user-created custom widgets.

Reports—View and download existing reports.

Reports Templates—Build reports using pre-defined templates, or customize a report. Reports can be generated on-demand scheduled

Incidents—Investigate, manage, and resolve your incidents and alerts.

Threat Response Center—Review emergent and global threat events, assess the impact to your organization, and build a remediation plan.

Unified Inventory—Comprehensive list of all domains, certificates, cloud compute instances, and unassociated responsive IPs.

Domains—List of domains and subdomains attributed to your organization.

Certificates—List of certificates attributed to your organization.

Owned Responsive IPs—List of IP addresses that expose a service and are part of an IP range that has been attributed to your organization.

Cloud Inventory—List of assets that were reported by a cloud provider or Prisma Cloud integration.

Services—List of external services, which are servers running on an IP:port or a domain:port that respond to scanners on some protocol.

Owned IP Ranges—List of IP address ranges attributed to your organization

Websites—List of web assets attributed to your organization.

Attack Surface Rules—View and manage the list of attack surface rules that trigger alerts.

Risk Scoring—Enable or disable Xpanse Risk Scoring and configure User Scoring Rules.

Alert Exclusions—Create rules to filter out alerts and incidents from the Expander UI.

Remediation Path Rules—Create rules to tell the Active Response module which remediation approach to take when responding to alerts.

Asset Tag Rules—Create rules to automatically tag existing and new assets.

Configuration—View and configure your automation integrations.