Review the List of Threat Events - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-04-17
Category
User Guide
Solution
Cloud
Abstract

Review a curated list of zero-day exploits and global threat events in the Threat Response Center.

Navigate to Incident ResponseThreat Response Center to view the complete list of threat events. The list is sorted by the Last Updated date.

For each event in the list, Expander displays the following information, enabling you to quickly identify which events are the highest priority for your organization.

  • Severity Score—This is the highest CVSS score of the CVEs associated with the event.

  • Threat Name and Brief Description

  • Active Alerts—Number of your organization's active alerts related to this event.

  • CVEs—Number of CVEs related to this event.

  • Affected Software—Names of the software affected by this event. The threat event details page lists the affected versions.

  • Last Updated date

threat-response-center.png