ASM alert resolution status - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide

Product
Cortex XSIAM
Creation date
2024-07-16
Last date published
2025-01-26
Category
Administrator Guide
Abstract

ASM alert resolution status can be terminal or reopenable.

The resolution status of an Attack Surface Management (ASM) alert can be either terminal or reopenable. Terminal resolution means the alert will not be reopened if Cortex XSIAM continues to observe the problem. The following ASM alert resolution statuses are terminal:

  • Resolved - Duplicate Alert

  • Resolved - False Positive

  • Resolved - True Positive

  • Resolved - Security Testing