Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
cwoody 03-24-2023	Cortex XDR disabling itself Hello, in our environment there are users across multiple departments reporting that Cortex XDR RTP periodically stops itself due to an "adaptive poli... posted in Cortex XDR Discussions	30	1
Cyber1985 03-24-2023	IOC Upload automation in Cortex XDR Hello dear community, Has anyone of you a ready to upload script for IOCs to cortex XDR (directly) from a file? Could you share it? How and where d... posted in Cortex XDR Discussions	44	1
rmavrinac 03-23-2023	Cortex XDR agent installation suggestions for a Proxmox host and its LXC containers We use a cluster of Proxmox servers which host a number of LXC containers and KVM/QEMU VMs. Our central IT department requires use to install the Cort... posted in Cortex XDR Discussions	68	2
rufat87 03-23-2023	Searching for multiple hashes on cortex XDR Does anyone know a way to search for multiple hashes on Cortex XDR? file_search = existing_files does not allow any operators other than "=" for the s... posted in Cortex XDR Discussions	57	2
odonaldadmin 03-23-2023	Ingesting Syslog to Private/Internal Syslog Hello, My organization utilizes graylog, and we host it on prem. Is there a way to route/tunnel the XDR tenant into our internal network? I am aware... posted in Cortex XDR Discussions	94	2

Articles

Cortex XDR PoC: Software Installations Blocking

01-02-2023 — Let's walkthrough a PoC of using Cortex XDR to block software installations —.msi and .exe file extensions — in a test environment.

Labels: Cortex XDR Learning
2534 3 1 published by rtsedaka in Cortex XDR Articles
02-15-2023 edited by rtsedaka

Cortex XDR Global Analytics & Supply Chain Attacks

07-05-2022 — Cortex XDR Global Analytics & Supply Chain Attacks Read this instructive article about Cortex XDR Global Analytics and how it protects against Supply chain attacks. We invite you to watch our cust...

Labels: Cortex XDR Learning
1626 published by rtsedaka in Cortex XDR Articles
09-16-2022 edited by rtsedaka

Blog Spotlight: Playbook of the Week: Automating Cortex XDR Investigation and Response in Cortex XSOAR

05-31-2022 — Automating XDR Investigation and Response Learn how SOC teams can utilize the best of both XDR’s extended endpoint threat detection and response with XSOAR’s workflow automation, orchestration, and...

Labels: Cortex XDR Cortex XDR Best Practices
1818 1 published by rtsedaka in Cortex XDR Articles
08-18-2022 edited by rtsedaka

SYMPHONY 2022: Watch the security operations summit on-demand!

05-15-2022 — SYMPHONY 2022 Watch the instructive sessions on-demand by clicking here: Symphony 2022 Learn more about Cortex XDR future events by visiting our event page

Labels: Cortex Events Security Operations
1475 published by rtsedaka in Cortex XDR Articles
05-31-2022 edited by rtsedaka