Get started with Threat Intel Management - Administrator Guide - Threat Intel Management Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation
Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-09-19
Category
Administrator Guide
Abstract

Learn how to use TIM in your investigation, utilizing Unit 42 Intel in your investigation.

Before diving in, you should understand the Cortex XSIAM Threat Intelligence Management's functionality and how it integrates with your needs. Review the use cases and key details to optimize your Cortex XSIAM experience from the start. Threat Intel management includes the following features:

  • Access to Unit 42 Intel data

  • Investigate files using sample analysis

  • Submit Sessions and Submissions

  • Manage Indicator Relationships

  • Deep dive into an indicator on the Indicators page.

Note

You must have the Cortex XSIAM Threat Intel Management (TIM) Add-on to use this feature.