Services vs Issues - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-26
End_of_Life
EoL
Category
User Guide
Abstract

The differences between the Services and Issues modules.

Both Services and the Issues modules allow you to review items that are attributed to your organization that are exposed to the public internet.

services-pyramid.png

Alerts and Incidents identify specific security problems and violations of your organization’s policies and help you track progress on efforts to remediate those problems.

Services provides you with a complete inventory of all services that Cortex Xpanse has observed without security judgements. You can use Services to search for items for which there are not currently Attack Surface Rules or to conduct technology usage audits.

Cortex Expanse can convert any Service Classifications that are relevant to your organization’s security policies into Issue Policies that will automatically flag new instances that appear on your network within the Issues module. We are also continuously developing new Service Classifications to support inventory and security use cases. Contact your account manager to discuss your needs or ideas.