Threat Intel Management

Cortex XSOAR Threat Intel Management includes features such as managing indicator relationships, enriching indicators, customizing indicator layouts, and managing TIM reports.

Threat Intel Management enables you to unify the core components of threat intel, including threat intel aggregation, scoring, and sharing. Cortex XSOAR automates threat intel management by ingesting and processing indicator sources, such as feeds and lists, and exporting the enriched intelligence data to SIEMs, firewalls, and any other system that can benefit from the data.