For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XSIAM

Get started with Threat Intel Management

Learn Threat Intel Management concepts, use cases, roles, and the indicator lifecycle.

Enhance your investigation with Threat Intel Management (TIM), which utilizes Unit 42 Intel.

Before diving in, you should understand the Cortex XSIAM Threat Intelligence Management's functionality and how it integrates with your needs. Review the use cases and key details to optimize your Cortex XSIAM experience from the start. Threat Intel management includes the following features:

  • Manage Indicator Relationships

  • Deep dive into an indicator on the XSIAM Indicators page.

Note

You must have the Cortex XSIAM Premium license or any other XSIAM license with the Threat Intel Management (TIM) add-on to use this feature.

Last updated

Was this helpful?