Cortex XSIAM

Resources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.

Cortex XSIAM

Welcome to the Cortex XSIAM resources page. Cortex XSIAM, the autonomous security platform powering the Modern SOC, operates across both cloud and enterprise security operations, providing true end-to-end-management of threats wherever they originate. This page provides information and resources to make your Palo Alto Networks journey as simple as possible. Ask your questions, find answers, connect with peers, and get access to troubleshooting resources all in one place.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
O.Faheem 04-27-2025	Solved! Cortex XDR Agent Hi, We are using Cortex XSIAM. Currently, some Microsoft Windows 10 and 11 agents are not receiving updates, indicating that they will soon become out... — Read more posted in Cortex XSIAM Discussions	165	3
O.Faheem 04-23-2025	Monitoring Bluetooth Contains a hyperlink Hi, We are using Cortex XSIAM. Now we want to perform monitoring of Bluetooth in Microsoft Windows 10 and 11 computers. The reason we want to check ... — Read more posted in Cortex XSIAM Discussions	103	0
Lakshminarayan 04-22-2025	Cortex XDR Host Firewall Rule evaluation Hi Team, I have a doubt about Host Firewall rule evaluation. Let say i have a rule created to allow all internal application inbound traffic on specif... — Read more posted in Cortex XSIAM Discussions	107	0
bridgetlitt 04-15-2025	Jira and Teams XSIAM Integration This is in XSIAM. When I create an instance in "Automation and Feed integrations" I can see that it creates one in the "Data sources" section as well.... — Read more posted in Cortex XSIAM Discussions	126	0
T.Sode 04-14-2025	Options to onboard Microsoft Message trace logs into XSIAM Contains a hyperlink As we have an option in Splunk to see the all the message tracking logs through Microsoft message trace app, do we have any similar app to integrate?C... — Read more posted in Cortex XSIAM Discussions	134	0

Blogs

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability Contains an image Contains a hyperlink

07-15-2024 — On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tracked as CVE-2024-6387, can result in unauthenticated remote... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR CVE-2024-6387 OpenSSH OpenSSH . RegreSSHion . Vulnerability RegreSSHion Remote Code Execution SSH threat brief
16270 by rtsedaka in Community Blogs

Harnessing the Power of Cortex XSIAM for Enhanced File Management and Data Privacy Contains an image

07-15-2024 — In an era where cybersecurity threats are evolving at a breakneck pace, Extended Detection and Response (XDR) solutions have emerged as the vanguard of defense for organizations. But what if we could extend the capabilities of the Cortex XSIAM sol... — Read more

Labels: Cortex XSIAM Endpoint Security
2110 4 by jcorzo in Community Blogs

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Release) Contains an image Contains a hyperlink

07-03-2024 — ith the ever evolving threat landscape, security operations teams require a new level of efficiency to protect their organizations. The latest release across Cortex products aims to solve a diverse set of challenges in security operations, all whi... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR XDR Xpanse XSIAM XSOAR
5318 by GonenFink in Community Blogs

SmartGrouping - Precision AI™-Driven Investigation Contains an image Contains a hyperlink

06-05-2024 — SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a piece, and the complete picture revea... — Read more

Labels: Cortex XDR Cortex XSIAM XDR XSIAM
2093 by rtsedaka in Community Blogs

Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach Contains an image Contains a hyperlink

05-16-2024 — Kubernetes has revolutionized the way we deploy and manage applications, but its complexity and dynamic nature also introduce a new set of security challenges. Attackers are constantly looking for ways to exploit vulnerabilities in Kubernetes clus... — Read more

Labels: Cortex XDR Cortex XSIAM Kubernetes
4809 by rtsedaka in Community Blogs