Cortex XSIAM

Cortex XSIAM

Resources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.

Welcome to the Cortex XSIAM resources page. Cortex XSIAM, the autonomous security platform powering the Modern SOC, operates across both cloud and enterprise security operations, providing true end-to-end-management of threats wherever they originate. This page provides information and resources to make your Palo Alto Networks journey as simple as possible. Ask your questions, find answers, connect with peers, and get access to troubleshooting resources all in one place.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
michaelsysec242 05-15-2025	Creating a Custom Issue For a Case Hello LiveComm, I have created a custom case with a single Issue for a Use-Case. I want to create more issues with a command or script in this custom ... — Read more posted in Cortex XSIAM Discussions	38	0
RPathivada 05-15-2025	Uploading files to Open Cloud Applications HI Team, I'm running a test case in uploading test documents to open source Cloud applications. I was successful, but in xdr_data and Zscaler datase... — Read more posted in Cortex XSIAM Discussions	44	0
O.Faheem 05-12-2025	Computers no longer showing in Console Hi, We have staff members who work in the mining area and do not connect for a very long time; in some cases we have seen they came back from the si... — Read more posted in Cortex XSIAM Discussions	70	0
AvinashAddala 05-08-2025	Querying Users Who Changed Incident Status to "Action Required" Hi Team, We have a process where a user works on an incident and updates its status to "Action Required" for further investigation. While we can see t... — Read more posted in Cortex XSIAM Discussions	84	0
O.Faheem 04-27-2025	Cortex XDR Agent Hi, We are using Cortex XSIAM. Currently, some Microsoft Windows 10 and 11 agents are not receiving updates, indicating that they will soon become out... — Read more posted in Cortex XSIAM Discussions	313	3

Blogs

SecOps Insider-April Edition

04-30-2025 — Discover key insights from Sam Rubin, SVP of Consulting and Threat Intelligence at Unit 42, on the critical importance of cyber resilience highlighted in the 2025 Global Incident Response Report. Get recommendations for enhancing incident response... — Read more

Labels: Cortex Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR Cybersecurity Prisma Cloud SecOps Security Operations Unit 42 XDR Xpanse
230 by RPrasadi in Community Blogs

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

07-15-2024 — On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tracked as CVE-2024-6387, can result in unauthenticated remote... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR CVE-2024-6387 incident response OpenSSH OpenSSH. RegreSSHion RegreSSHion Remote Code Execution security intelligence SOC SSH threat brief Threat Detection Vulnerability
16491 by rtsedaka in Community Blogs

Harnessing the Power of Cortex XSIAM for Enhanced File Management and Data Privacy

07-15-2024 — In an era where cybersecurity threats are evolving at a breakneck pace, Extended Detection and Response (XDR) solutions have emerged as the vanguard of defense for organizations. But what if we could extend the capabilities of the Cortex XSIAM sol... — Read more

Labels: Cortex XSIAM Endpoint Security incident response security intelligence SOC Threat Detection
2155 4 by jcorzo in Community Blogs

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Release)

07-03-2024 — ith the ever evolving threat landscape, security operations teams require a new level of efficiency to protect their organizations. The latest release across Cortex products aims to solve a diverse set of challenges in security operations, all whi... — Read more

Labels: Cortex Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR Release Notes XDR Xpanse XSIAM XSOAR
5405 by GonenFink in Community Blogs

SmartGrouping - Precision AI™-Driven Investigation

06-05-2024 — SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a piece, and the complete picture revea... — Read more

Labels: anomaly detection behavioral analysis Cortex XDR Cortex XSIAM incident response machine learning XDR XSIAM
2146 by rtsedaka in Community Blogs