Cloud Discovery & Exposure (part of the broader Attack Surface Management/ASM capabilities in XSIAM) is designed to solve the problem of 'blind spots' in an organization's infrastructure.

Unmanaged Assets: While the Asset Inventory shows what is currently managed, Cloud Discovery looks for what isn't. It scans cloud environments (AWS, Azure, GCP) and public-facing IP ranges to find servers or storage buckets that were created without the security team's knowledge.

Risk Identification: It identifies assets that are missing the Cortex agent or have exposed ports (like RDP or SSH open to the internet), allowing the SOC to proactively secure the attack surface before an attacker finds the same vulnerabilities.