Cortex XSOAR CS Newsletter Sep 2023

[rtsedaka]

September 2023

UPCOMING EVENTS

Customer Success Webinar: IAM Playbook Part 2

Join us on Sep 20th to learn about IAM-related playbooks, dashboards, and workflows designed to improve your organization's security posture through Cortex XSOAR automation with Identity and Access Management. 

We recommend reviewing the IAM Playbooks webinar Part 1 prior to this webinar.

>> Register here

CS Webinar Topics Suggestion Survey

We value your input! Help shape our next webinars by sharing the topic you'd like to learn more about. 

>> Fill out the form 

Recent CS Webinar

Watch our recent webinar to learn about the latest enhancements in the Default Pack for XSOAR 8.2 onward. 

Watch More

 

New How-to Videos

Watch these videos to learn how to get started with Cortex XSOAR 8:

• Overview & Activating XSOAR 8 Tenants
• User Authentication - Roles - User Groups  
• SAML SSO

View More

Latest Security Blogs & Articles

• Learn how to Retrieve a CSV file. 
• Read this blog and start leveraging the Generic Webhooks to push events into XSOAR. 
• Everything you need to know about the XSOAR 8 Migration is waiting for you in our new Cortex XSOAR 8 Migration Guide. 

Read More

 

Technical Courses

Check out the latest digital learning technical course:

Cortex XSOAR Engineer: Working with Lists 

Explore More

XSOAR PRODUCT UPDATES

Introducing New Playbooks

• The DNS Sinkhole Playbook addresses the challenge of identifying compromised hosts in a network by creating a controlled DNS redirection system. The problem lies in tracing back malicious DNS queries to their originating infected hosts, as the original source IP is lost when routed through an internal DNS server.
  The solution involves configuring a PAN-OS firewall to sinkhole DNS requests from internal DNS servers to a controlled address, enabling threat logs to report malicious queries from the internal server. Read more >> Configure DNS Sinkhole 
• The Cloud Token Theft Response playbook (part of the Cloud Incident Response content pack) provides an automated flow for collecting, analyzing, and responding to anomalous token usage activity.  

Playbook of the Week Blogs

Are you spending a lot of time managing incident tickets, password reset requests, and suspicious SSO alerts? Consider "outsourcing" a lot of these repetitive tasks to automation. Read about these automation hacks (and more) in our Playbook of the Week blog series

Cortex XSOAR Content Release - Aug 23' 

Learn about newly released content packs: Discord, Commvault Security IQ, and more.

>> Read more

Cortex XSOAR Marketplace

Explore additional content packs and test drive use cases from Cortex XSOAR and other contributors.

>> Marketplace site

XSOAR Product Release Notes 

Cortex XSOAR Feature Release Notes >> Documentation Help Center

Cortex XSOAR Version Release Announcements >> LIVEcommunity