Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
AhmedImran 06-06-2023	Cortex XDR Block List isolating machines Hi all, I'm running into this issue where some personnel do not want to add malicious hashes to the XDR block list as it will isolate the machine. A... posted in Cortex XDR Discussions	31	0
MFlippin77 06-06-2023	Custom XDR query to show a user login and log out daily Hi, I'm trying to find a good query to pull not only the user login time but also a user logout in AD/AZ AD. I've been able to get the login data easy... posted in Cortex XDR Discussions	35	0
RFeyertag 06-06-2023	API IOC Upload - Invoke-WebRequest : 413 Request Entity Too Large nginx Hello dear community, I am uploading some IOCs (about 300k). Where are the limitations? I can see PA is using nginx, but I can't find any informati... posted in Cortex XDR Discussions	44	1
michaelpageHFE 06-05-2023	Help creating a Cortex XDR alert when a user is added to a privileged group in Active Directory Hello, I am looking to create a Cortex XDR alert when a user is added to a privileged group in Active Director. I can get the alerts when a user is ... posted in Cortex XDR Discussions	67	1
Nazlikul 06-05-2023	Check Cortex XDR Agent status Is it still possible to check the status of Cortex agent in registry? I want to check the status on the client side periodically. I know it is possibl... posted in Cortex XDR Discussions	91	3

Articles

Cortex XDR PoC: Software Installations Blocking

01-02-2023 — Let's walkthrough a PoC of using Cortex XDR to block software installations —.msi and .exe file extensions — in a test environment.

Labels: Cortex XDR Learning
4049 3 1 published by rtsedaka in Cortex XDR Articles
02-15-2023 edited by rtsedaka

Cortex XDR Global Analytics & Supply Chain Attacks

07-05-2022 — Cortex XDR Global Analytics & Supply Chain Attacks Read this instructive article about Cortex XDR Global Analytics and how it protects against Supply chain attacks. We invite you to watch our cust...

Labels: Cortex XDR Learning
2154 published by rtsedaka in Cortex XDR Articles
09-16-2022 edited by rtsedaka

Blog Spotlight: Playbook of the Week: Automating Cortex XDR Investigation and Response in Cortex XSOAR

05-31-2022 — Automating XDR Investigation and Response Learn how SOC teams can utilize the best of both XDR’s extended endpoint threat detection and response with XSOAR’s workflow automation, orchestration, and...

Labels: Cortex XDR Cortex XDR Best Practices
2330 1 published by rtsedaka in Cortex XDR Articles
08-18-2022 edited by rtsedaka

SYMPHONY 2022: Watch the security operations summit on-demand!

05-15-2022 — SYMPHONY 2022 Watch the instructive sessions on-demand by clicking here: Symphony 2022 Learn more about Cortex XDR future events by visiting our event page

Labels: Cortex EVENTs Security Operations
1959 published by rtsedaka in Cortex XDR Articles
05-31-2022 edited by rtsedaka