Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
haimmiller 02-05-2023	export/view information about Windows endpoints missing with KB Hi, I'd like to know how I can export/view information about Windows endpoints that do not apply with specific KB by specific ENDPOINT GROUPS. I can... posted in Cortex XDR Discussions	0	0
Eric_Geater 02-03-2023	Full path not always available for mouse capture Good morning. The provided image is a screencap which appears when I select a single Result in an Incident. Notice that I used the mouse to select t... posted in Cortex XDR Discussions	64	1
Ssady1 02-03-2023	CDL and Rapid7 InsightIDR, new API method? Is anyone using the "new API method" R7 references?https://docs.rapid7.com/insightidr/palo-alto-cortex-data-lake/#New-API-Collection-Method-now-availa... posted in Cortex XDR Discussions	52	0
VineethArumulla 02-03-2023	Cortex XDR service getting stoppage on machines why the Monitoring agent service getting stopped on Hosts. When we checked the logs of some machines we got this error " XDR service cyserver was stop... posted in Cortex XDR Discussions	60	1
VineethArumulla 02-03-2023	Artifacts Query Assume alert has been generated in the XDR, if the IP involved in the artifacts are raised as malicious or suspicious by some of the security vendors ... posted in Cortex XDR Discussions	66	1

Articles

Cortex XDR PoC: Software Installations Blocking

01-02-2023 — Let's walkthrough a PoC of using Cortex XDR to block software installations —.msi and .exe file extensions — in a test environment.

Labels: Cortex XDR Learning
1447 2 1 published by rtsedaka in Cortex XDR Articles
01-02-2023 edited by rtsedaka

Cortex XDR Global Analytics & Supply Chain Attacks

07-05-2022 — Cortex XDR Global Analytics & Supply Chain Attacks Read this instructive article about Cortex XDR Global Analytics and how it protects against Supply chain attacks. We invite you to watch our cust...

Labels: Cortex XDR Learning
1214 published by rtsedaka in Cortex XDR Articles
09-16-2022 edited by rtsedaka

Blog Spotlight: Playbook of the Week: Automating Cortex XDR Investigation and Response in Cortex XSOAR

05-31-2022 — Automating XDR Investigation and Response Learn how SOC teams can utilize the best of both XDR’s extended endpoint threat detection and response with XSOAR’s workflow automation, orchestration, and...

Labels: Cortex XDR Cortex XDR Best Practices
1446 1 published by rtsedaka in Cortex XDR Articles
08-18-2022 edited by rtsedaka

SYMPHONY 2022: Watch the security operations summit on-demand!

05-15-2022 — SYMPHONY 2022 Watch the instructive sessions on-demand by clicking here: Symphony 2022 Learn more about Cortex XDR future events by visiting our event page

Labels: Cortex Events Security Operations
1115 published by rtsedaka in Cortex XDR Articles
05-31-2022 edited by rtsedaka