Alerts and incidents related to internal vulnerability scanning and other non-security operational events are categorized under theIT domainin Cortex XSIAM. This allows teams to differentiate between security-related and IT operations–related alerts for better incident management and prioritization.
"Incidents generated from internal IT operations, such as vulnerability scanning, are assigned to the IT domain, separating them from security-focused domains."
Page:Page 28 (Alerting and Detection Processes section)
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit