Get started with Threat Intel Management - Administrator Guide - Threat Intel Management Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Cortex XSIAM
Creation date
Last date published
Administrator Guide

Learn how to use TIM in your investigation, utilizing Unit 42 Intel in your investigation.

Before diving in, understand Cortex XSIAM Threat Intelligence Management's functionality and how it integrates with your needs. Review the use cases and other key details to optimize your Cortex XSIAM experience from the start.


You must have the Cortex XSIAM Threat Intel Management (TIM) Add-on to use this feature.

  • Access to Unit 42 Intel data

  • Investigate files using sample analysis

  • Submit Sessions and Submissions

  • Manage Indicator Relationships

  • Deep dive into an indicator on the Indicators page.