Cortex XDR PRO Management best practices

[RichardRosalesV]

Hello everyone,

Would like to know your recommended best practices for post-implementation/management of Cortex XDR pro for Endpoint and TB.

Also, it will be also great if you can share a KT document for it.

Thanks

[bbarmanroy]

Hi @RichardRosalesV this is a very broad topic to be discussed in a forum.

I would recommend you start by completing the Beacon training for Cortex XDR. Once done, you can start looking at how to manage incidents and alerts for your tenant. Review your endpoint policies and profiles on a regular basis and see what needs to be fine-tuned on an ongoing basis. Create dashboards for your analysts and senior management for them to review Cortex XDR fleet review.