Cortex XDR Customer Success Webinar: Extending Visibility with Cortex XDR Collectors

[rtsedaka]

This webinar covers Cortex XDR Collectors deployment and administration and a demonstration of use cases to show how security visibility can be extended by ingesting, parsing, and consuming on-premise third-party logs.  

* Available for Product License: Cortex XDR Pro Per TB.   You can read more about the license types here.

Additional read:

XDR Collectors

• XDR Collector Machine Requirements and Supported Operating Systems
• Resources Required to Enable Access to XDR Collectors
• Configure the XDR Collector Upgrade Scheduler
• Add an XDR Collector Profile for Windows
• Manage XDR Collectors

Filebeat and Winlogbeat

• Configure Filebeat Inputs
• Configure Filebeat Modules
• Configure Winlogbeat Modules

• https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/external-data-ingestion
• https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/data-management/create-pars...
• https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/...
• https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-advance... 
• XQL Syntax - https://beacon.paloaltonetworks.com/student/collection/666205/path/1469524
• XQL Building Blocks - https://beacon.paloaltonetworks.com/student/collection/666205/path/1472045
• XQL Functions - https://beacon.paloaltonetworks.com/student/collection/666205/path/1559611
• How-to Video Series: Ingest and Parse Custom Log Sources with XDR Collector - 
• Cortex XDR How-To Video: XDR Collector Log Ingestion
• Cortex XDR How-To Video: Broker VM Syslog Collection
• Cortex XDR How-To Video: Custom Parsing Rules
• Cortex XDR How-To Video: Advanced Parsing Rules - Modifying Logs
• Cortex XDR How-To Video: Advanced Parsing Rules - Multiple Rules
• https://regex101.com/

Have a question? Post it on our Discussions forum

Cortex XDR