For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XDR 5.x

Findings card

Understand the information displayed on a findings card.

Notice

This feature is included with Cloud Runtime Security or Cloud Posture Security add-ons.

The Findings card displays information about the selected finding. On this card you can see the following information.

Note

The information in this card is context specific, therefore some sections are not available for all findings.

Section
Description

Header

Finding ID, name, category (such as, Vulnerability or Compliance), time created, and time updated.

Description

Reason that the finding was created.

Impact

Information about the possible impact of the finding on your system.

Asset

Name and type of the affected asset.

To investigate the asset, click on the asset name to open a new tab displaying the asset card.

Detection logic

Detection rule that identified the specific security risk, configuration gap, or malicious behavior generating the finding.

Compliance

Violated compliance standards and specific framework controls associated with the finding.

Click the expand icon to see all standards associated with the finding. It also shows breached controls for each standard.

License note: Requires the Cortex Cloud Posture Management or Cortex Cloud Runtime Security add-on.

Evidence

Visualization of the finding in your environment.

Data

Normalized finding data.

Last updated

Was this helpful?