Select targets for Attack Surface Testing - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide
Product
Cortex XSIAM
Creation date
2024-02-26
Last date published
2024-04-25
Category
Administrator Guide

You can choose to run attack surface tests on all your targets or you can specify a subset of targets. If you selected Run tests on all targets in the initial setup, you do not need to perform this task unless you want to change your targets.

Note that Cortex XSIAM only runs attack surface tests on directly-discovered services, which are services that are definitively associated with an asset that belongs to your organization.

  1. Navigate to Detection &Threat Intel → Attack Surface → Attack Surface Testing

  2. In the Target Testing section, select one of the following options:

    • Turn On the toggle for Run vulnerability test on all targets discovered by us to run vulnerability tests on all your relevant targets.

    • Turn Off the toggle for Run vulnerability test on all targets discovered by us and then specify targets for vulnerability testing.

      1. Click Edit Targets (or Add Targets if this is the first time you have selected targets.)

      2. Use the filter to define a set of targets from your list of Services.

      3. Click Save Targets.