Asset classes - Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external tools - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-16
Category
Administrator Guide
Abstract

Accelerating remediation: Automated fix suggestions and manual remediation guidance enable developers to resolve code weaknesses directly in the source repository without context-switching to external tools

The asset inventory organizes your organization's resources into a hierarchy:

  1. Class: The highest-level grouping based on general purpose or domain, such as compute, network, or data.

  2. Category: A detailed grouping within a class based on normalized function, such as virtual machine, container, or bucket).

  3. Type: The most specific, provider-level implementation, such as AWS EC2 instance or GCP Compute Engine instance.

The following asset classes are available in the inventory:

Asset class

Description

License

AI

Provides a detailed view of AI-related assets, their attributes, and associated risks.

Notice

This feature is included with a Cortex XSIAM Premium license or the Cloud Posture Security or Cloud Runtime Security add-on.

API

Provides a comprehensive view of Application Programming Interfaces (APIs) across your cloud platforms.

Notice

This feature is included with a Cortex XSIAM Premium license or the Cloud Runtime Security add-on.

Application

Provides a high-level summary and detailed insights into the business applications within your environment.

Notice

This feature is included with a Cortex XSIAM Premium license or the Cloud Posture Security or Cloud Runtime Security add-on.

Code

Provides an overview of code assets, including all code repositories, Infrastructure as Code (IaC) resources, CI/CD pipelines, and software packages.

Notice

This feature is included with the AppSec add-on.

Compute

Provides a detailed overview of compute resources, including CaaS resources, virtual machines, containers, serverless functions, Kubernetes clusters, and general devices.

Data

Provides an overview of data assets and their associated risks, highlighting sensitive assets and assets marked as open to the world.

Notice

This feature is included with a Cortex XSIAM Premium license or the Cloud Posture Security or Cloud Runtime Security add-on.

Device

Overview of physical or virtual devices with a Cortex XDR agent installed.

Notice

This feature is included with a Cortex XSIAM Enterprise or Premium license or the Cortex XDR agent add-on.

External Surface

Provides an overview of external-facing assets, including services versus websites, domains versus certificates, and their distribution across providers.

Notice

This feature is included with a Cortex XSIAM Premium license or the Attack Surface Management (ASM) add-on.

Identity

Provides an overview of identity-related assets, giving visibility into both user and service-based identities and their associated permissions.

Notice

This feature is included with a Cortex XSIAM Premium license or the Cloud Posture Security or Cloud Runtime Security add-on or the Identity Threat Module (ITDR) add-on.

Network

Provides an overview of network-related assets, including Load Balancers, Network Interfaces, Security Groups, and Subnets.

Security Services

A complete overview of the security services being actively managed within your environment.

All Other Assets

All assets that are uncategorized.