Cortex XDR

Cortex XDR

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place.

Welcome to the Cortex XDR resource page. Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all Palo Alto Networks products in one place. On this page you can engage in Cortex XDR discussions and review helpful resources dedicated to Cortex XDR.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
ScottCloster 10-08-2024	Cortex XDR Prevent and "Identity Analytics" Module - licensing confusion Good day, I am running in circles trying to figure out whether or not I have the access to the "Identity Analytics" module. I'm looking to alert on se... — Read more posted in Cortex XDR Discussions	46	2
kindzma 10-08-2024	high priority 'Behavioral Threat' alert for smss.exe (system)? Every few weeks or so getting a high priority alert: 'Behavioral Threat' generated by XDR Agent detected on host <some_WS2019_server> involving ... — Read more posted in Cortex XDR Discussions	52	2
fmedinau 10-07-2024	Retetion Time - cortex xdr Hi, I want to know what is the retetion time for the incidents in the cortex xdr tenant. After how long are the console incidents cleared? thank you posted in Cortex XDR Discussions	74	1
Hisashi_Abe 10-07-2024	create BIOC rules via Cortex XDR API Hi community,I'd like to enquire whether Cortex XDR can create BIOC rules via Cortex XDR API.I could not find any description about creating BIOC rule... — Read more posted in Cortex XDR Discussions	99	1
Allera 10-04-2024	Problemas de compatibilidad Broker OVA con VCLOUD Saben si el formato de OVA del broker es compatible con VCLOUD o en que formato lo tendria que generar para poder montarlo? posted in Cortex XDR Discussions	89	1

Articles

Cortex XDR CS Newsletter June 2024

06-13-2024 — Don't miss our monthly announcements, How-to Videos, and latest blogs in the Customer Success What's New Newsletter! — Read more

Labels: Cortex XDR XDR Newsletter
1109 published by rtsedaka in Cortex XDR Articles
06-13-2024 edited by rtsedaka

Cortex XDR CS Newsletter May 2024

05-09-2024 — Read all the latest and greatest from Cortex XDR Customer Success! — Read more

Labels: Cortex XDR XDR Newsletter
1277 published by rtsedaka in Cortex XDR Articles
05-09-2024 edited by rtsedaka

Cortex XDR CS Newsletter April 2024

04-10-2024 — April 2024 UPCOMING EVENTS Alert Tuning Webinar Series Join us for a Customer Success webinar series, Alert Tuning, starting on April 24! You may register below for the series in advance. Register here: Part 1 | Part 2 Symphony 2024: AI and Automation Come see where security operations are heade... — Read more

Labels: Cortex XDR XDR Newsletter
1379 published by rtsedaka in Cortex XDR Articles
04-10-2024 edited by rtsedaka

Cortex XDR CS Newsletter March 2024

03-18-2024 — March 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for the last part of the webinar series: Parsing & Correlation Rules - Improving Application Security with Correlations. Register here: Part 3 Investigation and Threat Hunting Virtual Workshop Calling all custome... — Read more

Labels: Cortex XDR
1553 published by rtsedaka in Cortex XDR Articles
03-18-2024 edited by rtsedaka

Cortex XDR CS Newsletter Feb 2024

02-16-2024 — February 2024 UPCOMING EVENTS Parsing and Correlation Rules Webinar Series Register now for Part 2 of the webinar series: Correlation Rules - the core of detection. You may review the recording for Part 1 in the On-Demand section below Register here: Part 2 | Part 3 Investigation and Threat Hunti... — Read more

Labels: Cortex XDR
1608 published by rtsedaka in Cortex XDR Articles
02-16-2024 edited by rtsedaka

Blogs

Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

07-15-2024 — On July 1, 2024, a critical signal handler race condition vulnerability was disclosed in OpenSSH servers (sshd) on glibc-based Linux systems. This vulnerability, called RegreSSHion and tracked as CVE-2024-6387, can result in unauthenticated remote... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR CVE-2024-6387 OpenSSH RegreSSHion Remote Code Execution SSH threat brief
4938 by rtsedaka in Community Blogs

Introducing the New Cortex Shellcode AI Protection: A Precision AI-Driven Module

07-15-2024 — In this write-up, we will dive into the realm of shellcode and examine how our AI-driven approach is once again raising the bar when it comes to threat detection and prevention. — Read more

Labels: Cortex Cortex XDR Precision AI shellcode
1466 1 by rtsedaka in Community Blogs

What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Release)

07-03-2024 — ith the ever evolving threat landscape, security operations teams require a new level of efficiency to protect their organizations. The latest release across Cortex products aims to solve a diverse set of challenges in security operations, all whi... — Read more

Labels: Cortex XDR Cortex Xpanse Cortex XSIAM Cortex XSOAR XDR Xpanse XSIAM XSOAR
2475 by GonenFink in Community Blogs

Palo Alto Networks Excels in MITRE Managed Services Evaluation

06-25-2024 — Palo Alto Networks Unit 42 is a leader in MDR, delivering MTTD twice as fast as the average participant and leveraging the industry’s best XDR technology. — Read more

Labels: Cortex XDR XDR
972 by rtsedaka in Community Blogs

Forrester Names Palo Alto Networks a Leader in XDR

06-11-2024 — Today, we are excited to announce that Cortex XDR has been recognized as a Leader in The Forrester Wave™: Extended Detection and Response (XDR) Platforms, Q2 2024. — Read more

Labels: Cortex XDR XDR
1580 2 by GonenFink in Community Blogs