Cortex XDR
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.
49 PostsCortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.
49 PostsCortex XSOAR by Palo Alto Networks enables SOC analysts to manage alerts across all sources, standardize processes with Cortex XSOAR playbooks, take action on threat intel, and automate response for any security use case.
44 PostsWelcome to the Cortex Xpanse LIVEcommunity! Explore how-to guides, best practices, and on-demand videos to help you get the most out of Cortex Xpanse. Have questions or insights to share? Join the conversation in our Discussions forums and connect with our Product Experts. Stay in the loop—subscribe now to get the latest product updates delivered t...
3 PostsResources for Cortex XSIAM, Palo Alto Networks’ autonomous security platform powering the Modern SOC.
1 PostsCortex Cloud is a comprehensive cloud-native security platform with the industry’s broadest security and compliance coverage.
25 PostsRandy Uhrlaub, Cortex XSOAR Customer Success Architect Table Of Content IntroductionRetrieval Augmented GenerationText Search Augmented GenerationAnything LLM XSOAR Content PackCustomer InfrastructureHostedCloud HostedCustomer InfrastructureSetupAnything LLM and XSOARIntegration Instance ConfigurationUse Case DevelopmentWorkspace and Docume...
By Brad Semma, Cortex XSOAR Customer Success Architect When to customize and when not to customize Cortex XSOAR customers love to customize their instances. If a customer decides to customize an integration, they may find the assigned docker image is not configured to handle the additional actions. In events such as these, you may need to ...
By Randy Uhrlaub, Customer Success Architect Table Of Content Review DataSettings and InfoGuardrailsSystem DiagnosticsIntegrationsDashboardsIncidentsDashboardsAutomation Performance AnalysisDashboardsPlaybook Performance AnalysisResources Review Data XSOAR has several areas in the console that provide insight into performance of the conf...
Cloud Infrastructure Entitlement Management (CIEM) provides users with broad visibility into effective permissions, continuously monitors multi-cloud environments for risky and unused entitlements, and automatically makes least privilege recommendations. Users gain simple yet powerful insight into which identities have access to critical infrast...
Series 1 Series 2 Series 3 Did you know that Prisma Cloud can embed comprehensive AppSec capabilities across the software development cycle? View this demo workshop led by our Prisma Cloud experts. In our workshop, we'll guide you through how your organization can integrate fixing Infrastructure-as-Code (IaC) misconfiguration...
July 2024 UPCOMING EVENTS Customer Success Webinar: On-Prem v6 Migration to v8 SaaS Join us on July 24th to learn everything you need about the on-prem migration to the XSOAR 8 SaaS. >>Register here CS Webinar Topics Suggestion Survey We value your input! Help shape our next webinars by sharing the topic you'd like to learn more abo...
New Content Packs Release For more info on use cases, integrations, and related documentation, click on the Pack title: GoogleThreatIntelligenceAnalyze suspicious hashes, URLs, domains, and IP addresses. GitHub FeedA feed to ingest indicators of compromise from Github repositories. The feed supports general extraction of IOCs, extracting fro...
The latest Spark User Summit took place on June 20, 2024, and focused on Using Prisma Cloud with Terraform. This demo aimed to showcase the seamless interoperability between HashiCorp Terraform and Prisma Cloud, emphasizing how Prisma Cloud secures infrastructure as code (IaC) deployments managed by Terraform. Attendees learned how to integrate ...
Threat Hunting Methodologies with Cortex XDR This session introduces Threat Hunting, its benefits, and how to put it to use. We cover the different Threat Hunting methodologies and available add-ons for XDR as Host Insights. You may review the queries we use in the video below. (function() { var wrapper = document.getElementById('lia-vid-...
As AI continues to reshape the landscape of cloud computing, understanding how to manage and secure AI systems becomes crucial for every security professional. See Yotam Ben-Ezra deep dive into AI Security Posture Management (AI-SPM). After the video, check out this blog for further ways to utilize AI-SPM.
June 2024 UPCOMING EVENTS Customer Success Webinar Series: Proactive Threat Hunting Part 2 The event concluded on June 12, 2024. Visit our events page later this month to learn about our next event. CS Webinar Topics Suggestion Survey We value your input! Help shape our next webinars by sharing the topic you'd like to learn more about. ...
June 2024 UPCOMING EVENTS Threat Hunting with XDR Calling all incident responders and forensic investigators to join us on June 26th for a Customer Success webinar and learn about Threat Hunting! >>Register here Investigation and Threat Hunting Virtual Workshop Calling all customers to join our 3-hour virtual workshop designed to ...
New Content Packs Release For more info on use cases, integrations, and related documentation, click on the Pack title: Suspicious Domain Hunting This pack provides all the necessary tools for the Suspicious Domain Hunting use case. It uses the CertStream integration to ingest new SSL certificates and alert for type-squatting. NVD Feed 2...
Alert Tuning Part 2 Watch the second session in our Customer Success webinar series, which covers real-world use cases. (function() { var wrapper = document.getElementById('lia-vid-6353956173112w960h540r276'); var videoEl = wrapper ? wrapper.querySelector('video-js') : null; if (videoEl) { if (window.videojs) { window.videojs(video...
May 2024 UPCOMING EVENTS Customer Success Webinar Series: Proactive Threat Hunting Join us on May 22nd for the first session of the next webinar series, Proactive Threat Hunting! Register the series below: Part 1 | Part 2 Symphony 2024: AI and Automation In case you missed it, catch the recording of Symphony 2024 below >&...

