> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xpanse/inventory/unified-inventory.md).

# Unified Inventory

The **Inventory** → **Unified Inventory** page enables you to view all the assets that Cortex Xpanse has attributed to your organization on one page that you can sort, filter, and download. This list view does not include services, websites, or owned IPv4 or IPv6 ranges, which are derived from your assets.

Select any row in the list view to display details about the asset in the details pane.

The table below describes the fields in the **Unified Inventory** list view.

<table data-header-hidden><thead><tr><th width="218"></th><th></th></tr></thead><tbody><tr><td>Field</td><td>Description</td></tr><tr><td><strong>ACTIVE SERVICE TYPES</strong>*</td><td>An array column that displays all the active service types observed for this asset.</td></tr><tr><td><strong>ASN Countries</strong></td><td>ASN countries associated with an owned responsive IP or IP range.</td></tr><tr><td><strong>ASN Handles</strong></td><td>ASN handles associated with an owned responsive IP or IP range.</td></tr><tr><td><strong>ASN Record Names</strong></td><td>ASN Record Names associated with an owned responsive IP or IP range.</td></tr><tr><td><strong>ASN Registries</strong></td><td>ASN registries associated with an owned responsive IP or IP range.</td></tr><tr><td><strong>ASSET TYPE</strong>*</td><td><p>Type of asset, which can be one of the following:</p><ul><li><strong>Certificate</strong></li><li><strong>Cloud Compute Instance</strong></li><li><strong>Domain</strong></li><li><strong>Owned Responsive IPs</strong></li><li><strong>Prisma Cloud Resources</strong></li></ul></td></tr><tr><td><strong>ASM IDs</strong></td><td>The ASM identifiers for this asset, indicate it is exposed to the Internet.</td></tr><tr><td><strong>Business Unit Overrides</strong></td><td>Indicates that the Business Unit (BU) assignment was updated by a user.</td></tr><tr><td><strong>BUSINESS UNITS</strong></td><td>Designation to classify assets by the organization that owns the asset.</td></tr><tr><td><strong>CLOUD PROVIDER</strong>*</td><td>The cloud provider used to collect these cloud assets is either GCP, AWS, or Azure.</td></tr><tr><td><strong>CLOUD ID</strong>*</td><td>Displays the Resource ID as provided by the cloud provider.</td></tr><tr><td><strong>EXTERNALLY DETECTED PROVIDERS</strong>*</td><td>Indicates the provider for the IP address the service is hosted on.</td></tr><tr><td><strong>Externally Inferred CVEs</strong></td><td>Externally Inferred CVEs are identified by comparing the product name and version of active service, if identifiable, with CVES for those products in the National Vulnerability Database. Additional investigation may be required to confirm if the CVE is present. Select the asset in the list view to view the asset details, which include the list of all the externally inferred CVEs.</td></tr><tr><td><strong>Externally Inferred Vulnerability Score</strong></td><td>This score is based on the highest CVSSv3 score for Externally Inferred CVEs on the services for this asset.</td></tr><tr><td><strong>FIRST OBSERVED</strong>*</td><td>When the asset was first observed via any of the sources.</td></tr><tr><td><strong>HAS ACTIVE SERVICES</strong>*</td><td>Indicates whether the asset has any active services. Click the link to view the services.</td></tr><tr><td><strong>HAS RELATED ALERTS</strong></td><td>Indicates whether Xpanse created alerts related to this asset. Click the link to view the related alerts.</td></tr><tr><td><strong>HAS RELATED INCIDENTS</strong></td><td>Indicates whether Xpanse created incidents related to this asset. Click the link to view the related incidents.</td></tr><tr><td><strong>INTERNAL IP RANGES</strong></td><td>IP address ranges allocated to the IP addresses.</td></tr><tr><td><strong>IPv4 ADDRESSES</strong>*</td><td>Array column listing the IPv4 addresses associated with this asset.</td></tr><tr><td><strong>IPv6 ADDRESSES</strong></td><td>Array column listing the IPv6 addresses associated with this asset.</td></tr><tr><td><strong>LAST OBSERVED</strong>*</td><td>When the asset was last observed via any of the sources.</td></tr><tr><td><strong>NAME</strong>*</td><td>Displays the name that describes the asset as provided by the source, if provided.</td></tr><tr><td><strong>NOTES</strong></td><td>Notes that were manually added to the asset in Expander.</td></tr><tr><td><strong>OPERATING SYSTEM</strong>*</td><td>The operating system reported by the source for this asset.</td></tr><tr><td><strong>REGION</strong>*</td><td>Displays the region as provided by the Cloud provider.</td></tr><tr><td><strong>SOURCES</strong>*</td><td>An array column that indicates the source that provided observations for this asset.</td></tr><tr><td><strong>TAGS</strong></td><td><p>The following types of tags can be applied to assets:</p><ul><li>IR—IP Range tag. Can be applied to owned IPv4 ranges.</li><li>AT—Asset Tag. Can be applied to domains, certificates, cloud compute instances, Prisma Cloud resources, and owned responsive IPs.</li><li>AR—Attribution Reason tag. These tags are applied by Xpanse and indicate whether an asset has been attributed to you because it <strong>Has Your Content</strong> or is <strong>Registration Only</strong>.</li><li>TR—Rules-Based tag. Custom tags that are systematically applied to assets based on rules that you define.</li></ul></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xpanse/inventory/unified-inventory.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.