> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xpanse/threat-response-center/review-the-list-of-threat-events.md).

# Review the list of threat events

Review a curated list of zero-day exploits and global threat events on the Emerging Vulnerabilities page.

Navigate to **Incident Response** → **Threat Response Center** to view the Threat Response Center, which provides a complete list of threat events and links to related alerts. The list is sorted by the Last Updated date.

For each event in the list, Cortex Xpanse displays the following information, enabling you to quickly identify which events are the highest priority for your organization.

* CVSS Score—This is the highest CVSS score of the CVEs associated with the event.
* Threat Name and Brief Description
* Active Alerts—Number of your organization's active alerts related to this event.
* CVEs—Number of CVEs related to this event.
* Affected Software—Names of the software affected by this event. The threat event details page lists the affected versions.
* Last Updated date

![threat-response-center.png](https://2229240073-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F02CCMTnqc4fWJkdEuCs8%2Fuploads%2Fgit-blob-7ef458ae6d665d25b76fa3872301e6dd92cc87a4%2F1ff5836fb7e12e5c7ddbe580ea721497a72904386c08de4227820cbeb170c809.png?alt=media)

At the top of the Threat Response Center page are a set of widgets that present a graphical view of the number of alerts related to threat events in the Threat Response Center. You can change the timeframe for each widget by clicking the options icon. The percentage shown indicates the increase or decrease over the specified period of time. The total count (in blue) represents the most recent count, which is the count at the end of whichever time period is displayed.

You cannot generate a report directly from the Threat Response Center, but the alert widgets at the top of the Threat Response Center page are available for customer report generation in the **Widget Library**. To find the **Widget Library**, navigate to **Dashboards** → **Widget Library** in the main menu on the left.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xpanse/threat-response-center/review-the-list-of-threat-events.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.