Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
ShubhamT281 06-17-2024	XQL query for searching extensions installed within an application Hi All,Looking for an XQL query to detect extensions installed from an applications marketplace to use within the application. For eg. someone install... — Read more posted in Cortex XDR Discussions	6	0
Ivan_Verbuyst 06-14-2024	Cortex XDR Kubernetes Agent - Cluster Name Hi, Can anyone tell me what is the purpose of the "Cluster Name" and "Development Platform" fields when creating a Cortex XDR Kubernetes Agent Install... — Read more posted in Cortex XDR Discussions	72	0
Vinothkumar_SBA 06-12-2024	Cortex XDR Agent certificate enforcement Hi Team, I have enabled the Cortex XDR agent settings for certificate enforcement. However, endpoints are showing as only partially protected, and the... — Read more posted in Cortex XDR Discussions	141	1
cnogawaterfront 06-11-2024	API Syntax Issue Hi everyone, I'm trying to use the 'run_script' API to start the built-in 'Execute_Commands' script on a target machine. I've worked through a few e... — Read more posted in Cortex XDR Discussions	120	0
R.SilvaOliveira 06-11-2024	XQL LLMNR/NBT-NS poisoning querry Hi guys, has anyone tried to create a correlation rule that detects LLMNR/NBT-NS poisoning attempts? or if Cortex XDR by default already detects posted in Cortex XDR Discussions	121	0

Articles

Cortex XDR CS Newsletter June 2024

06-13-2024 — Don't miss our monthly announcements, How-to Videos, and latest blogs in the Customer Success What's New Newsletter! — Read more

Labels: Cortex XDR XDR Newsletter
102 published by rtsedaka in Cortex XDR Articles
06-13-2024 edited by rtsedaka

Cortex XDR CS Newsletter May 2024

05-09-2024 — Read all the latest and greatest from Cortex XDR Customer Success! — Read more

Labels: Cortex XDR XDR Newsletter
667 published by rtsedaka in Cortex XDR Articles
05-09-2024 edited by rtsedaka

Cortex XDR CS Newsletter April 2024

04-10-2024 — April 2024 UPCOMING EVENTS Alert Tuning Webinar Series Join us for a Customer Success webinar series, Alert Tuning, starting on April 24! You may register below for the series in advance. Register here: Part 1 | Part 2 Symphony 2024: AI and Automation Come see where security operations are heade... — Read more

Labels: Cortex XDR XDR Newsletter
765 published by rtsedaka in Cortex XDR Articles
04-10-2024 edited by rtsedaka

Cortex XDR CS Newsletter March 2024

03-18-2024 — March 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for the last part of the webinar series: Parsing & Correlation Rules - Improving Application Security with Correlations. Register here: Part 3 Investigation and Threat Hunting Virtual Workshop Calling all custome... — Read more

Labels: Cortex XDR
908 published by rtsedaka in Cortex XDR Articles
03-18-2024 edited by rtsedaka

Cortex XDR CS Newsletter Feb 2024

02-16-2024 — February 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for Part 2 of the webinar series: Correlation Rules - the core of detection. You may review the recording for Part 1 in the On-Demand section below Register here: Part 2 | Part 3 Investigation and Threat Hunti... — Read more

Labels: Cortex XDR
982 published by rtsedaka in Cortex XDR Articles
02-16-2024 edited by rtsedaka

Blogs

Forrester Names Palo Alto Networks a Leader in XDR

06-11-2024 — Today, we are excited to announce that Cortex XDR has been recognized as a Leader in The Forrester Wave™: Extended Detection and Response (XDR) Platforms, Q2 2024. — Read more

Labels: Cortex XDR XDR
272 1 by GonenFink in Community Blogs

SmartGrouping - Precision AI™-Driven Investigation

06-05-2024 — SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a piece, and the complete picture revea... — Read more

Labels: Cortex XDR Cortex XSIAM XDR XSIAM
412 by rtsedaka in Community Blogs

Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach

05-16-2024 — Kubernetes has revolutionized the way we deploy and manage applications, but its complexity and dynamic nature also introduce a new set of security challenges. Attackers are constantly looking for ways to exploit vulnerabilities in Kubernetes clus... — Read more

Labels: Cortex XDR Cortex XSIAM Kubernetes
1394 by rtsedaka in Community Blogs

Playbook of the Week: Automating Response to Living-Off-the-Land (LOTL) Attacks

05-15-2024 — The Cortex XDR - Remote PsExec with LOLBin command execution alert playbook enables organizations to automate and expedite alert handling. — Read more

Labels: Alert Automation Cortex XDR Cortex XSOAR
1682 by emgarcia in Community Blogs

Leading with a Prevention-First Approach for Cloud Detection and Response

04-25-2024 — As cloud computing continues to evolve and becomes the ad-hoc standard for many of the world’s largest enterprises, we also see attack surfaces growing and the escalation of cyberthreats targeting the cloud and traditional enterprise assets. These... — Read more

Labels: CDR Cloud Cortex XDR Cortex XSIAM detection and response XDR XSIAM
1573 by emgarcia in Community Blogs