Supported assets and findings - Administrator Guide - Cortex XSIAM - Cortex - Cortex

Supported assets and findings - Administrator Guide - Cortex XSIAM - Cortex - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product

Cortex XSIAM

Creation date

2025-07-15

Last date published

2026-06-11

Notice

This feature is included with a Cortex XSIAM Premium license. It is also included with any other Cortex XSIAM license that has the Cloud Posture Security or Cloud Runtime Security add-on.

Prerequisite

Graph Search requires View or View/Edit RBAC permissions for Graph Search under Investigation & Response → Search.

The following tables list the supported assets and findings that can be used in Graph Search.

Below are the asset classes and asset categories that are supported. When clicking on any asset category, the applicable asset types are displayed in the entity picker of the Graph Search user interface for building query based on the available data.

Asset Class Name	Asset Category
AI	AI Model AI Workspace Dataset Model Endpoint
Code	CI/CD Pipeline Repository
Compute	Container Image Container Image Repository Container Instance Container Registry Kubernetes Cluster Registry Image Runtime Image Serverless Function Virtual Machine Virtual Machine Image
Data	Database Disk Bucket
Identity	Group Identity Policy Service Account
Network	Gateway Load Balancer Network Interface Subnet VPC
Organization	Account Organization Organization Unit

Below are the findings categories that are supported, along with the name of the category that you select in the entity picker of the Graph Search user interface.

Finding Category Name	Finding Category to Select in Graph Search
Configuration	Configuration Finding
Data	Data Finding
Identity	Identity Finding
Malware	Malware Finding
Posture	Posture Finding
Vulnerability	Vulnerability Finding