Get to know

# Ido Van Dijk

Principal Security Architect

*** ** * ** ***

Blogs by Ido Van Dijk  
Sort By: Recent  
Recent Popular

*** ** * ** ***

[![Creating an Automated Workflow for Account Lockout Resolution](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/04/Woman-Working-at-Computer-1.jpg)](https://www.paloaltonetworks.com/blog/security-operations/creating-an-automated-workflow-for-account-lockout-resolution/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Creating an Automated Workflow for Account Lockout Resolution](https://www.paloaltonetworks.com/blog/security-operations/creating-an-automated-workflow-for-account-lockout-resolution/)

This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.  
Apr 10, 2025  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Automating Response to Unauthorized User Account Creation](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/02/Man-Working-2-1.jpg)](https://www.paloaltonetworks.com/blog/security-operations/automating-response-to-unauthorized-user-account-creation/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Automating Response to Unauthorized User Account Creation](https://www.paloaltonetworks.com/blog/security-operations/automating-response-to-unauthorized-user-account-creation/)

This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.  
Feb 20, 2025  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Playbook of the Week: Unleash the Power of Identity Threat Intelligence with Automation](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/10/cq5dam.web_.1280.1280-12.jpeg)](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-itdr/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Playbook of the Week: Unleash the Power of Identity Threat Intelligence wit...](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-itdr/)

The Cortex XSOAR Prisma Cloud Virtual Machine (VM) Alert Prioritization content pack helps cloud security operations teams prioritize and manage these alerts.  
Oct 24, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[](https://www.paloaltonetworks.com/blog/security-operations/303502/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Playbook of the Week: Swallow Traffic to Malicious Domains with DNS Sinkhol...](https://www.paloaltonetworks.com/blog/security-operations/303502/)

Automatically redirect traffic away from malicious domains using DNS sinkholes  
Aug 31, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Playbook of the Week: Automate Anything with the Default Playbook](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/05/In-All-Seriousness-4.jpg)](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automate-anything-with-the-default-playbook/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Playbook of the Week: Automate Anything with the Default Playbook](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automate-anything-with-the-default-playbook/)

The Default playbook is the most commonly used playbook in the Cortex Marketplace. And for good reason. It is used by most of our XSOAR customers to configure their first automation use case. The Default playbook, by virtue of its name, provides the building blocks for automating core elements of an incident response workflow.  
May 11, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

Load more

*** ** * ** ***

Blogs by Ido Van Dijk  
Sort By: Popular  
Popular Recent

*** ** * ** ***

[](https://www.paloaltonetworks.com/blog/security-operations/303502/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Playbook of the Week: Swallow Traffic to Malicious Domains with DNS Sinkhol...](https://www.paloaltonetworks.com/blog/security-operations/303502/)

Automatically redirect traffic away from malicious domains using DNS sinkholes  
Aug 31, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Automating Response to Unauthorized User Account Creation](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/02/Man-Working-2-1.jpg)](https://www.paloaltonetworks.com/blog/security-operations/automating-response-to-unauthorized-user-account-creation/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Automating Response to Unauthorized User Account Creation](https://www.paloaltonetworks.com/blog/security-operations/automating-response-to-unauthorized-user-account-creation/)

This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.  
Feb 20, 2025  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Playbook of the Week: Automate Anything with the Default Playbook](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/05/In-All-Seriousness-4.jpg)](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automate-anything-with-the-default-playbook/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown)

### [Playbook of the Week: Automate Anything with the Default Playbook](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automate-anything-with-the-default-playbook/)

The Default playbook is the most commonly used playbook in the Cortex Marketplace. And for good reason. It is used by most of our XSOAR customers to configure their first automation use case. The Default playbook, by virtue of its name, provides the building blocks for automating core elements of an incident response workflow.  
May 11, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Playbook of the Week: Automating Password Resets with Chatbot](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/04/Contemplating.jpg)](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automating-password-resets-with-chatbot/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown)

### [Playbook of the Week: Automating Password Resets with Chatbot](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-automating-password-resets-with-chatbot/)

This Cortex XSOAR playbook helps IT ops teams automate and streamline the password reset process, saving them time while ensuring end user satisfaction.  
Apr 27, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

[![Playbook of the Week: Uncovering Unknown Malware Using SSDeep](https://www.paloaltonetworks.com/blog/wp-content/uploads/2023/01/Getting-it-Done-1.jpg)](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-uncovering-unknown-malware-using-ssdeep/)

## [Playbook of the Week](https://www.paloaltonetworks.com/blog/security-operations/category/playbook-of-the-week/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown)

### [Playbook of the Week: Uncovering Unknown Malware Using SSDeep](https://www.paloaltonetworks.com/blog/security-operations/playbook-of-the-week-uncovering-unknown-malware-using-ssdeep/)

Cryptographic hashes like SSDeep can be used with Cortex XSOAR to help improve detection and enrichment of malware investigations  
Jan 13, 2023  
By [Ido Van Dijk](https://www.paloaltonetworks.com/blog/author/ido-van-dijk/?ts=markdown "Posts by Ido Van Dijk")

*** ** * ** ***

Load more  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language