Threat Intel Management - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

The native threat intel management capabilities provide you with the ability to unify the core components of threat intel, including threat intel aggregation, scoring, and sharing. Cortex XSIAM automates threat intel management by ingesting and processing indicator sources, such as feeds and lists, and exporting the enriched intelligence data to SIEMs, firewalls, and any other systems that can benefit from the data. These capabilities enable you to sort through millions of indicators daily and take automated steps to make those indicators actionable in your security posture.