This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cortex XDR

Welcome to the Cortex XDR LIVEcommunity! Explore how-to guides, best practices, and on-demand videos to help you get the most out of Cortex XDR. Have questions or insights to share? Join the conversation in our Discussions forums and connect with our Product Experts.

Stay in the loop—subscribe now to get the latest product updates delivered to you.

Blogs

Beyond Playbooks: A Deep Dive into the Cortex AgentiX Case Investigation Agent

07-30-2026 — Go beyond rigid playbooks with the Cortex AgentiX Case Investigation Agent. Discover how context-aware reasoning, native XQL generation, real-time telemetry, and enterprise-grade guardrails help security teams investigate faster while maintaining ... — Read more

Labels: Cortex AgentiX Cortex XDR Cortex XSIAM custom-featured-post
515 1 by in Community Blogs

Architecting Autonomous SecOps: Cortex AgentiX

06-09-2026 — Attackers are using AI to speed up data exfiltration by up to 4X. Discover how Cortex AgentiX transforms traditional SOAR into a spectrum of autonomous reasoning with domain-specific AI agents, native Model Context Protocol (MCP) integrations, and... — Read more

Labels: Blogs Cortex XDR Cortex XSIAM Product Features
2085 3 5 by in Community Blogs

Code Less, Do More with Cortex AgentiX

05-29-2026 — Use natural language to build scripts for your playbooks and agents. This fourth video in our series shows you how to prompt our Automation Engineer to build you scripts or troubleshoot existing ones. No more coding from scratch. Let the Automatio... — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
695 by in Community Blogs

Using AI Prompts in Cortex AgentiX

05-29-2026 — This third video in the series covers best practices for building AI prompts in Cortex AgentiX. Learn how to optimize the prompt, test it and save it in your prompt library for reuse in playbooks or agents. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
708 by in Community Blogs

Building Your First Agent in Cortex AgentiX

05-29-2026 — This second video in our series goes over how to build custom agents in Cortex AgentiX. Learn how to give an agent a "job description", specific actions and permissions. Here’s how to build your AI dream team. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
889 by in Community Blogs

View All

Digital Learning Courses

Access Palo Alto Networks learning platform to gain technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

Videos

06-26-2024 — Cortex XDR Customer Success Webinar: Threat Hunting Methodologies

05-30-2024 — Cortex XDR Customer Success Webinar Series Part 2: Alert Tuning Use Cases

04-24-2024 — Cortex XDR Customer Success Webinar Series Part 1: Alert Tuning Fundamental

03-27-2024 — Cortex XDR Customer Success Webinar Series Part 3: Improving Application Security with Parsing & Correlations

02-28-2024 — Cortex XDR Customer Success Webinar Series Part 2: Correlation Rules - The Core of Detection

View All Videos

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author Topic Views Replies
.522643
.522643
08-19-2026

Real-Time BIOC Detection and Playbook Execution for SSH/RDP Sessions

Hello, I am working on a Playbook to detect RDP/SSH communications between servers and automatically terminate the corresponding process when such com...

posted in Cortex XDR Discussions

3 0
SeanDeHarris
SeanDeHarris
08-18-2026

SBAC for DLP add-on

Hello All, Would SBAC also works for DLP (add-on) module events? We wou ld enable SBAC for those Endpoints with DLP enable by department. Then allow ...

posted in Cortex XDR Discussions

47 0
SeanDeHarris
SeanDeHarris
08-18-2026

Trigger an alert by email for File Integrity Monitoring FIM (add-on) events

hello experts, just exploring the new FIM module, is it possible to trigger an email alerts for the FIM events? will this FIM events be logged in on...

posted in Cortex XDR Discussions

54 1
A.BELKAHLA
A.BELKAHLA
08-13-2026

Sending case to a third party tickiting system

Hello, i hope you re doing well i want to know the steps to send cases when there generated to our third party tickiting system , how to do it via AP...

posted in Cortex XDR Discussions

95 1
RajeshPremSingh
RajeshPremSingh
08-12-2026

Cortex XDR Integration with ManageEngine ServiceDesk Plus

Could you please guide us on how to integrate Cortex XDR with ManageEngine ServiceDesk Plus for ITSM? We would like to understand the recommended inte...

posted in Cortex XDR Discussions

81 1
Join now
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks