Cortex XDR
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.
6 Posts
Activity in Security Operations
Cortex XSOAR New Content Pack Release - May 23'
New Content Packs Release
For more info on use cases, integrations, and related documentation, click on the Pack title:
ForcepointDLP
Forcepoint DLP event collector
Free Feeds
This content Pack helps set up free feeds (Plug & Fetch, Free with sign
Cortex XSOAR New Content Pack Release - April 23'
New Content Packs Release
For more info on use cases, integrations, and related documentation, click on the Pack title:
3CXDesktopApp Supply Chain Attack
This pack handles 3CXDesktopApp Supply Chain Attack investigation and response
EDL Monitor
This
A New Version of XSOAR 8 (8.2) Was Introduced
A new version of Cortex XSOAR 8 (8.2) was introduced.
Here are some highlights from this release:
- XSOAR 8 now offers Cortex XSOAR Multi-Tenant, which is designed for managed security service providers and enterprises that require strict data segrega
Cortex XSOAR 6.11 is now GA
The latest version of Cortex XSOAR is now available for GA.
Here are some highlights from this release:
-
Improved Upgrade Process for Multi-Tenant Deployments.
- After deleting a user, you can now clear the user's data from content, such as active inc
Cortex XSOAR Python Development Guide
Python Development Quick Start
The Marketplace content packs provide out-of-the-box (OOTB) integrations and playbooks supported by a common base of commands and automation scripts. While automations support JavaScript and PowerShell, the most comp
Cortex XSOAR New Content Pack Release - March 23'
New Content Packs Release
For more info on use cases, integrations, and related documentation, click on the Pack title:
Infoblox BloxOne
Infoblox BloxOne
Infoblox BloxOne
SymantecEDR
Symantec EDR On-prem helps to detect threats on
Symantec EDR On-prem helps to detect threats on
Content Release Notes
Cortex XDR Content Release Notes
May 30 2023 Release:
- Improved logic of 3 High Analytics BIOCs:
- Suspicious API call from a Tor exit node (ac17179d-68dd-46cc-8d2a-68d506e6626e) - improved logic of a High Analytics BIOCs
- A successful SSO sign-in from TO
Cortex XSOAR 6.10.0 (Build No. 255865) is now available
The latest version of Cortex XSOAR is now available.
Check out the Cortex XSOAR Release Notes for more details.
Cortex XSOAR New Content Pack Release - Feb 23'
New Content Packs Release
For more info on use cases, integrations and related documentation click on the Pack title:
Cortex Xpanse
Content for working with Attack Surface Management (ASM).
Content for working with Attack Surface Management (ASM).
FortinetFortiwebVM
Fortiweb VM i
Fortiweb VM i
Cortex XSOAR 6.10.0 (Build No. 250144 ) is now available
The latest version of Cortex XSOAR is now available.
Check out the Cortex XSOAR Release Notes for more details.
XSOAR Use Case Definition Template
XSOAR Use Case Definition (UCD) Template
This template will help you understand and leverage the UCD to benefit implementation strategy, understand how your IR process fits into XSOAR, and identify integrations for ingestion/enrichment needed. The X
Cortex XDR PoC: Software Installations Blocking
In this proof of concept (PoC), we'll take a look at using Cortex XDR to block software installations in a test environment.
This PoC focuses on blocking files that use the .msi and .exe file extensions. These file types are widely used for comm
...
Cortex XSOAR New Content Pack Release - January 2023
New Content Packs Release
MITRE ATT&CK - Courses of Action
Looking for actionable intelligence? This intelligence-driven Pack provides manual or automated remediation of MITRE ATT&CK techniques.
Looking for actionable intelligence? This intelligence-driven Pack provides manual or automated remediation of MITRE ATT&CK techniques.
GreyNoise Pr
Cortex XSOAR 6.6 is now GA
The newest version of Cortex XSOAR is now available for GA.
Here are some highlights from this release:
- Indicator field Trigger Scripts:
Associate indicator fields with trigger automation scripts that check for field changes, and then take actions ba
Cortex XSOAR New Content Packs Release - Dec 22'
New Content Packs Release
Azure Enrichment and Remediation
Playbooks using multiple Azure content packs for enrichment and remediation purposes
CiscoSMA
The Security Management Appliance (SMA) is used to centra
The Security Management Appliance (SMA) is used to centra
-
32Not applicable
Copyright 2007 - 2023 - Palo Alto Networks