Tactics Technique and Procedure (TTP) for Noob Threat Hunting

[tech_noob]

I am new to Palo Alto NGFW and Cortex, does anybody have  any special TTP they want to share to noobs like me?

[S.Cantwell]

Welcome to PANW!

So I think the best place, is to have you look/configure your FW for some best practices.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/best-practices-for-secur...

This is a good place to start.

This is another

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention.html

[tech_noob]

I a spare PA220 that I can use to test this configuration before putting on Panorama.

Thank you!

[tech_noob]

Here is a very good video on how Cortex XDR is used as TTP.

Optimize SecOps Investigation and Response to Stop Sophisticated Attacks with Cortex XDR and XSOAR

https://www.youtube.com/watch?v=3ZAeF2MiSwY