Ido Van Dijk

The Cortex XSOAR Prisma Cloud Virtual Machine (VM) Alert Prioritization content pack helps cloud security operations teams prioritize and manage these alerts.

Automatically redirect traffic away from malicious domains using DNS sinkholes

The Default playbook is the most commonly used playbook in the Cortex Marketplace. And for good reason. It is used by most of our XSOAR customers to configure their first automation use case. The Default playbook, by virtue of its name, provides the building blocks for automating core elements of an incident response workflow.

This Cortex XSOAR playbook helps IT ops teams automate and streamline the password reset process, saving them time while ensuring end user satisfaction.

Cryptographic hashes like SSDeep can be used with Cortex XSOAR to help improve detection and enrichment of malware investigations