Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Cortex XDR Discussions

Have questions? Join the Live Community to post your questions and get answers.
Author	Topic	Views	Replies
jdemery 04-26-2018	Can Cortex XDR (formerly Magnifier) Ingest DHCP, DNS, Active Directory Logs? Curious if Cortex XDR has the ability to ingest logs from DHCP, DNS and Activey Directory domain controllers for analyzation along with logs being sen...	987	2
kcross 04-09-2018	What is the average time required for Cortex XDR to profile user behavior? Cortex XDR can generate the accuracy levels advertised after three weeks of automatically profiling an organization’s network. Some Cortex XDR detecto...	729	2
kcross 03-09-2018	What is the best place to deploy the Next-Generation Firewall so that it monitors internal traffic? A Palo Alto Networks next-generation firewall must capture network traffic sent between endpoints and data center servers. To monitor internal ...	765	2
kcross 02-01-2018	Does Pathfinder require an agent to be installed on the endpoint? No, Pathfinder uses an agentless endpoint analysis service, running its own code on suspicious endpoints to collect information about running processe...	332	0
kcross 02-01-2018	Will Cortex XDR identify IoT threats? Cortex XDR (formerly Magnifier) is well suited to stopping Internet of Things (IoT) threats. IoT devices can be exploited to become a point of entry f...	466	0
kcross 02-01-2018	How is Cortex XDR different from AutoFocus? AutoFocus complements Cortex XDR (formerly Magnifier). AutoFocus provides contextual threat intelligence to accelerate investigations. Security analys...	570	0

Cortex XDR Articles

Content Release Notes

04-14-2019 — July 18, 2019 Release Modified 6 BIOC rules: Privilege escalation using local named pipe impersonation (dd0ac223-8aaa-4630-988d-de39eba83d29) - increased severity to medium Privilege...

825 3 by vcotton in Cortex XDR Articles