10-21-2024 08:26 AM - edited 10-21-2024 08:26 AM
Hi @J.Suter, thanks for reaching us using the Live Community.
The XDR console has a built-in Query Library in the XQL Query designer with, for now, 90+ examples.
This list gets updated on each XDR Console new release, if there are important new queries to add.
We have here in the LC this advanced XQL crash course than can help you to build some very specific use cases as the ones you mention: https://live.paloaltonetworks.com/t5/cortex-xdr-how-to-videos/cortex-xdr-xql-use-cases-and-applicati...
Regarding the AI, we have Cortex Copilot for XSIAM since the last release, so is a matter of time that this will also be available for XDR.
If this post answers your question, please mark it as the solution.
