Cortex XSIAM

Buy or Renew

Cortex XSIAM

Resources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.

Welcome to the Cortex XSIAM LIVEcommunity! Explore how-to guides, best practices, and on-demand videos to help you get the most out of Cortex XSIAM. Have questions or insights to share? Join the conversation in our Discussions forums and connect with our Product Experts.

Stay in the loop—subscribe now to get the latest product updates delivered to you.

Articles

Elevate Your Security Operations with the New Strata Cloud Manager Course

09-03-2026 — 🚀 Elevate Your Security Operations with the New Strata Cloud Manager Course. The complexity of managing disparate security environments is a constant challenge. Our new two-day, instructor-...

Label: Blog Cortex Cortex XDR Cortex XSIAM General Articles Prisma Access Prisma Access Browser PrismaCloud Strata Cloud Manager Strata Logging Service
405 published by aallen in News
09-03-2026 edited by aallen

New Learning Subscription for OLX Courses

09-01-2026 — Maximize Your Cybersecurity Defenses with the New Palo Alto Networks Learning Subscription In an evolving threat landscape, your defense is only as strong as your skills. We’re excited to announ...

Label: Blog Cortex Cortex XDR Cortex XSIAM General Articles Prisma Access Prisma Access Browser PrismaCloud Strata Cloud Manager Strata Logging Service
727 published by aallen in News
09-03-2026 edited by aallen

Secure the Cloud. Advance Your Career- NEW Cloud Security Engineer

07-22-2026 — 🚀 Secure the Cloud. Advance Your Career. As cloud architecture evolves, so does the threat landscape. Organizations across the globe are seeking engineers who don’t just understand cloud i...

Label: Blog Cortex Cortex XDR Cortex XSIAM General Articles Prisma Access Prisma Access Browser PrismaCloud Strata Cloud Manager Strata Logging Service
652 1 published by aallen in News
07-22-2026 edited by aallen

Automating the Palo Alto NGFW's Process/Deamon Restarts with Python PEXPECT

06-09-2026 — Discover how to streamline your Palo Alto Networks NGFW operations by leveraging the power of Python, pexpect, and the PAN-OS Python SDK to conditionally trigger daemon process restarts. Learn how ...

Label: API & SDK Automation CICD integration Container Cortex Xpanse Cortex XSIAM Cortex XSOAR cyberelite Docker NGFW Configuration Python
1990 3 6 published by nikoolayy1 in General Articles
07-06-2026 edited by crasmussen

Introducing Palo Alto Networks On-Demand Learning Experience (OLX)

04-21-2026 — Introducing Palo Alto Networks On-Demand Learning Experience (OLX) Last month’s debut of our first On-Demand Learning Experience (OLX) course, Strata Cloud Manager: Next-Generation Firewall Manag...

Label: Blog Cortex Cortex XDR Cortex XSIAM General Articles Prisma Access Prisma Access Browser PrismaCloud Strata Cloud Manager Strata Logging Service
4058 3 published by aallen in News
04-21-2026 edited by aallen

Blogs

Beyond Playbooks: A Deep Dive into the Cortex AgentiX Case Investigation Agent

07-30-2026 — Go beyond rigid playbooks with the Cortex AgentiX Case Investigation Agent. Discover how context-aware reasoning, native XQL generation, real-time telemetry, and enterprise-grade guardrails help security teams investigate faster while maintaining ... — Read more

Labels: Cortex AgentiX Cortex XDR Cortex XSIAM
1174 1 by vmonga in Community Blogs

Architecting Autonomous SecOps: Cortex AgentiX

06-09-2026 — Attackers are using AI to speed up data exfiltration by up to 4X. Discover how Cortex AgentiX transforms traditional SOAR into a spectrum of autonomous reasoning with domain-specific AI agents, native Model Context Protocol (MCP) integrations, and... — Read more

Labels: Blogs Cortex XDR Cortex XSIAM Product Features
2964 3 5 by vmonga in Community Blogs

Code Less, Do More with Cortex AgentiX

05-29-2026 — Use natural language to build scripts for your playbooks and agents. This fourth video in our series shows you how to prompt our Automation Engineer to build you scripts or troubleshoot existing ones. No more coding from scratch. Let the Automatio... — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
854 by JGoh in Community Blogs

Using AI Prompts in Cortex AgentiX

05-29-2026 — This third video in the series covers best practices for building AI prompts in Cortex AgentiX. Learn how to optimize the prompt, test it and save it in your prompt library for reuse in playbooks or agents. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
932 by JGoh in Community Blogs

Building Your First Agent in Cortex AgentiX

05-29-2026 — This second video in our series goes over how to build custom agents in Cortex AgentiX. Learn how to give an agent a "job description", specific actions and permissions. Here’s how to build your AI dream team. — Read more

Labels: Cortex AgentiX Cortex Cloud Cortex XDR Cortex XSIAM
1123 by JGoh in Community Blogs

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Sorted by:

Author	Topic	Views	Replies
MohanrajaE 10-07-2026	Need help in validating XQL query to identify suspicious MFA registration from new GEO location + new device dataset = okta_sso_raw\| filter (debugContext contains "New Geo-Location=POSITIVE" and debugContext contains "New Device=POSITIVE") and (eventType in("... posted in Cortex XSIAM Discussions	146	1
S.Edwin 10-08-2026	A month-Old Issues Triggering a Case Now Hello Community, We have identified several cases where the associated issues are showing dates from August. Has anyone encountered similar behavior? ... posted in Cortex XSIAM Discussions	175	1
bridgetlitt 09-15-2026	XSIAM VPN Analytics How do i get third party vpn logs to work with the xsiam analytics rules (https://cortex-docs.paloaltonetworks.com/analytics-alerts/alerts-by-data-sou... posted in Cortex XSIAM Discussions	183	0
Noshutdown 09-15-2026	Cortex XSIAM/XDR - Java File Examination conflict in Policy Hello Team,"We have observed that every agent upgraded to version 9.2.1.285 on Citrix devices (VDA, MCS) changes its status to "Partially Protected" a... posted in Cortex XSIAM Discussions	233	0
PA_nts 09-14-2026	MS Defender for Endpoint Isolation playbook Hi, Is anyone using the built in playbook to remote isolate ms defender for endpoints? I want to get your thoughts on the built in playbook - does it... posted in Cortex XSIAM Discussions	118	0