All assets - Learn about the All Assets page, under Asset Inventory. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

The All Assets page provides a centralized repository containing information about all assets within your environment, including enterprise, multi-cloud, code, and external surfaces. Dedicated asset modules allow multi-method asset coverage, such as agent, agentless, logs, from various sources. Having full visibility of assets allows for timely incident response, effective threat hunting, and attack surface reduction.

Inventory table

When navigating to the All Assets page, the primary inventory table provides a high-level view of your entire landscape. The table displays general identifying information for each asset.

The table provides immediate security context by displaying a breakdown of the cases and issues attached to each asset, highlighting the number of high or critical risks in brackets.

Asset card

Clicking an asset name in the table opens a unified asset card that consolidates its attributes and related risks. From this card, analysts can investigate all relevant normalized data and raw provider JSON connected to the asset, leave comments for other analysts, and use the Cortex Agentic Assistant to get AI-driven insights and recommendations.

Asset classes

To help you easily filter your inventory, assets are separated by their respective classes into dedicated sections under the All Assets menu. Note that the specific asset classes and types shown depend on your system licensing.