Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
RFeyertag 04-25-2024	Cortex XDR PRO - Exploit Profile Question Hello dear comminity, is there any log to see, filter or get notified, if the agent makes changes in the configuration? BR Rob posted in Cortex XDR Discussions	25	1
jessecleary 04-25-2024	XQL Question - Aggregation by field of type array is unsupported I'm trying to run a query to get a count of how many times combinations of the values in "initiated_by" and "initiator_path" occur for an alert in the... — Read more posted in Cortex XDR Discussions	23	0
AbFahad 04-24-2024	Does Cortex XDR capture full URL visits? Hello community, Do you know if Cortex XDR has the capability to capture full URL visits please? Can you please share any documentations saying so i... — Read more posted in Cortex XDR Discussions	67	1
Maxstr 04-24-2024	Best practice for installing agents on Windows "multi-session" Azure AVD? Which method should be used to install the Cortex XDR agents for the Azure-only Windows 11 multi-session VDI? Since it's both a terminal server, and a... — Read more posted in Cortex XDR Discussions	80	0
Edgar_Lapuerta 04-24-2024	Cortex XDR agent does not send alerts if an event happen when computer is disconnected from network Hi everyone, If an event is triggered in a computer without connection, nothing is sent to the console when the computer recovers the connection. ... — Read more posted in Cortex XDR Discussions	75	0

Articles

Cortex XDR CS Newsletter April 2024

04-10-2024 — April 2024 UPCOMING EVENTS Alert Tuning Webinar Series Join us for a Customer Success webinar series, Alert Tuning, starting on April 24! You may register below for the series in advance. Register here: Part 1 | Part 2 Symphony 2024: AI and Automation Come see where security operations are heade... — Read more

Labels: Cortex XDR XDR Newsletter
254 published by rtsedaka in Cortex XDR Articles
04-10-2024 edited by rtsedaka

Cortex XDR CS Newsletter March 2024

03-18-2024 — March 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for the last part of the webinar series: Parsing & Correlation Rules - Improving Application Security with Correlations. Register here: Part 3 Investigation and Threat Hunting Virtual Workshop Calling all custome... — Read more

Labels: Cortex XDR
400 published by rtsedaka in Cortex XDR Articles
03-18-2024 edited by rtsedaka

Cortex XDR CS Newsletter Feb 2024

02-16-2024 — February 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for Part 2 of the webinar series: Correlation Rules - the core of detection. You may review the recording for Part 1 in the On-Demand section below Register here: Part 2 | Part 3 Investigation and Threat Hunti... — Read more

Labels: Cortex XDR
480 published by rtsedaka in Cortex XDR Articles
02-16-2024 edited by rtsedaka

Cortex XDR Newsletter Jan 2024

01-10-2024 — January 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for our upcoming webinar series: Parsing and Correlation Rules - from Fundamentals to Practical Applications, starting on Jan 31st. Register below: Part 1 | Part 2 | Part 3 Investigation and Threat Hunting Virt... — Read more

Labels: Cortex XDR
1022 published by rtsedaka in Cortex XDR Articles
01-10-2024 edited by rtsedaka

Cortex XDR CS Newsletter Dec 2023

12-14-2023 — Check out the latest updates, upcoming events, and the newest educational videos! — Read more

Labels: Cortex XDR
746 1 published by rtsedaka in Cortex XDR Articles
12-14-2023 edited by rtsedaka

Blogs

Leading with a Prevention-First Approach for Cloud Detection and Response

04-25-2024 — As cloud computing continues to evolve and becomes the ad-hoc standard for many of the world’s largest enterprises, we also see attack surfaces growing and the escalation of cyberthreats targeting the cloud and traditional enterprise assets. These... — Read more

Labels: CDR Cloud Cortex XDR Cortex XSIAM detection and response XDR XSIAM
92 by emgarcia in Community Blogs

Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400 (Updated April 24)

04-24-2024 — This threat brief is frequently updated as new threat intelligence is available for us to share. The full update log is at the end of this post and offers the fullest account of all changes made. — Read more

Labels: Cortex Cortex XDR Cortex Xpanse Cortex XSIAM threat brief Threat Briefs and Assessments unit 42 unit42
252 by emgarcia in Community Blogs

On Credible and Cyber-Contextual Labeling

04-11-2024 — Machine learning (ML) powered methods are rapidly taking over the cybersecurity medium, performing a variety of complex tasks, including detection, prevention, and prioritization. — Read more

Labels: Cortex XDR Incidents labels ML Threat Detection XDR
354 by emgarcia in Community Blogs

5 Unique Challenges for AI in Cybersecurity

03-25-2024 — AI tends to be understood as one coherent field of study and application where similar solutions apply for all the use cases. The reality is that applying AI in real-world environments with high precision requires specialization in the specific fi... — Read more

Labels: Cortex XDR Cortex XSIAM XDR XSIAM
1767 1 1 by emgarcia in Community Blogs

Playbook of the Week: Automating Management of XDR Identity Analytics Alerts

03-18-2024 — Identity analytics is a critical cybersecurity tool in combating the challenges posed by compromised user accounts and malicious insiders. Identity threats are pervasive across organizations of all sizes and industries, potentially exposing sensit... — Read more

Labels: Cortex Cortex XDR Cortex XSOAR
1351 1 by emgarcia in Community Blogs