Scan re-evaluation process - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide

After the initial scan has been completed, the scan re-evaluation process ensures that container images remain secure over time without requiring a full re-scan.

Instead of manually triggering new scans, the scan re-evaluation process automatically reassesses existing scan results every 24 hours using the latest threat intelligence feeds. This approach reduces the need for resource-intensive re-scans, while maintaining up-to-date security assessments.

By continuously monitoring container images for emerging threats, you can proactively mitigate risks and ensure compliance with security best practices.