Attack surface rules - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

An attack surface rule is a definition managed by Cortex XSIAM that is used to identify risks in an attack surface. It defines what Cortex XSIAM is looking for and the associated risk. Cortex XSIAM creates an alert when it detects an instance of that rule.