Cortex XSIAM

Cortex XSIAM

Resources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.

Welcome to the Cortex XSIAM resources page. Cortex XSIAM, the autonomous security platform powering the Modern SOC, operates across both cloud and enterprise security operations, providing true end-to-end-management of threats wherever they originate. This page provides information and resources to make your Palo Alto Networks journey as simple as possible. Ask your questions, find answers, connect with peers, and get access to troubleshooting resources all in one place.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
Hisashi_Abe 09-10-2024	Using XQL queries in XSIAM playbooks Hi Team, I'd like to enquire whether Cortex XSIAM can search the logs of a dataset using XQL Query in a Playbook.Cortex XSOAR can do that for Cortex... — Read more posted in Cortex XSIAM Discussions	214	1
amcdonal363 09-05-2024	Integrating Proofpoint TAP into XSIAM Hi, I would like some guidance on which data source I should use when integrating Proofpoint TAP into XSIAM. In the content pack "Proofpoint TAP" ... — Read more posted in Cortex XSIAM Discussions	153	0
Vishal.raut 08-22-2024	Rule list I would like to see a list of rules regarding the types of incidents I receive in XSIAM. I am not talking about IOC/BIOC Can anyone help with the p... — Read more posted in Cortex XSIAM Discussions	575	3
Tony_74 08-22-2024	Urgent Help Needed: Where Can I Find Cortex XSIAM Deployment and Service Management Training Videos? Hi Team, I have a new client, one urgently transitioning from QRadar to Cortex XSIAM, and I'm completely unfamiliar with XSIAM. I urgently need inst... — Read more posted in Cortex XSIAM Discussions	379	1
amcdonal363 08-01-2024	Coalescing of events in XSIAM? Looking to migrate from QRadar/QRoC to XSIAM In QRadar/QRoC, coalescing works in the following manner: https://www.ibm.com/support/pages/qradar-how-do... — Read more posted in Cortex XSIAM Discussions	527	1

Blogs

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

07-15-2024 — On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tracked as CVE-2024-6387, can result in unauthenticated remote... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR CVE-2024-6387 OpenSSH RegreSSHion Remote Code Execution SSH threat brief
3942 by rtsedaka in Community Blogs

Harnessing the Power of Cortex XSIAM for Enhanced File Management and Data Privacy

07-15-2024 — In an era where cybersecurity threats are evolving at a breakneck pace, Extended Detection and Response (XDR) solutions have emerged as the vanguard of defense for organizations. But what if we could extend the capabilities of the Cortex XSIAM sol... — Read more

Labels: Cortex XSIAM Endpoint Security
1043 4 by jcorzo in Community Blogs

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Release)

07-03-2024 — ith the ever evolving threat landscape, security operations teams require a new level of efficiency to protect their organizations. The latest release across Cortex products aims to solve a diverse set of challenges in security operations, all whi... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR XDR Xpanse XSIAM XSOAR
2052 by GonenFink in Community Blogs

SmartGrouping - Precision AI™-Driven Investigation

06-05-2024 — SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a piece, and the complete picture revea... — Read more

Labels: Cortex XDR Cortex XSIAM XDR XSIAM
1262 by rtsedaka in Community Blogs

Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach

05-16-2024 — Kubernetes has revolutionized the way we deploy and manage applications, but its complexity and dynamic nature also introduce a new set of security challenges. Attackers are constantly looking for ways to exploit vulnerabilities in Kubernetes clus... — Read more

Labels: Cortex XDR Cortex XSIAM Kubernetes
2530 by rtsedaka in Community Blogs