Palo Alto Networks

Cortex XSOAR

Playbook of the Week: Streamlining the management of XDR Incidents

The new Cortex XDR Lite - Incident Handling playbook is a new addition to the Palo Alto Networks Cortex XDR - Investigation and Response content pack. Used as the default playbook in this content pack, it streamlines incident response workflows for Cortex XDR incidents ingested into XSOAR, automating manual tasks associated with...

Announcement

Playbook of the Week

Nov 09, 2023

By Omri Itzhak

Palo Alto Networks

Products and Services

Partners

Announcement, Must-Read Articles, Product Features

XSOAR 8.4: What’s New

Earlier this year we announced our software as a service (SaaS) offering with the Cortex XSOAR 8 release. XSOAR 8 offers the benefits of tight integration with the industry-leading Cortex platform and its other cybersecurity products. In ad...

Oct 30, 2023

By Alon Yardeni

Playbook of the Week

Playbook of the Week: Unleash the Power of Identity Threat Intelligence wit...

When it comes to detecting identity-related threats, security teams need to distinguish between suspicious but benign activity and truly malicious activity. This can be challenging...

Oct 24, 2023

By Ido Van Dijk

Playbook of the Week

Playbook of the week: Uncover Your RDP Secrets

Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP cli...

Sep 21, 2023

By Ben Melamed

Playbook of the Week, Uncategorized

Playbook of the Week: Cloud Token Theft Response

Cloud computing's scalability, adaptability, and cost-efficiency have seen businesses increasingly utilize these services. Nevertheless, with the growth of cloud services come new security risks. Among these is...

Sep 14, 2023

By Ben Melamed

Playbook of the Week

Playbook of the Week: Automating DLP Incident Feedback

In today's digital landscape, data loss prevention (DLP) solutions have become a critical component for keeping sensitive data secure in an organization. With an increasing amount of data being generated and sh...

Sep 07, 2023

By Tomer Haimof

Playbook of the Week

Playbook of the Week: Swallow Traffic to Malicious Domains with DNS Sinkhol...

When you hear about sinkholes, it’s not necessarily a good thing. However, in the cybersecurity realm, DNS sinkholing is a technique used to redirect DNS queries for malicious doma...

Aug 31, 2023

By Ido Van Dijk

Playbook of the Week

Playbook Of The Week - Fending Off Living Off the Land Attacks

Living Off the Land (LOTL) attacks are used by attackers to evade detection by the system's own native utilities, scripting languages, or trusted applications, rather than resortin...

Aug 24, 2023

By Arik Day

Playbook of the Week

Playbook Of The Week - New Features for Better Response to Phishing Campaig...

Phishing emails are one of the most frequent, easily executable, and harmful security attacks that organizations, regardless of size, face today. High-volume, persistent phishing a...

Aug 17, 2023

By Arik Day

Announcement, Cloud Security, Code to Cloud, Must-Read Articles, News and Events, Partners, Product Features

Deloitte Safeguards Software Development Lifecycle

As cloud computing continues to increase in popularity, businesses should consider remaining vigilant in protecting their information. Enterprises are...

Aug 10, 2023

By Joe Rogalski

Must-Read Articles, Points of View, Product Features, Products and Services

Multiplying Force with Automation — Reducing the Soul Crushing Work

In our fourth episode of "This Is How We Do It," Peter Havens from Cortex product marketing, and Kyle Kennedy, Palo Alto Networks senior staff securit...

Aug 08, 2023

By Dena De Angelo

Playbook of the Week

Playbook of the Week: Using CVEs in Incident Investigation

The Common Vulnerabilities and Exposures (CVE) repository is designed to provide a reference for a publicly known information security vulnerability. CVE identifiers, or CVEs, are...

Aug 03, 2023

By Dror Avrahami

Playbook of the Week: Microsoft Office and Windows HTML RCE CVE-2023-36884 ...

Patch Tuesday - not the favorite day of the month for your security team as zero-day threat alerts or newly discovered vulnerabilities invariably lead to a disrupted work schedule that involves multiple teams a...

Jul 20, 2023

By Jane Goh

Announcement, Must-Read Articles, News and Events

Cortex XSOAR Marketplace’s Top Contributors for April - June 2023!

Cortex XSOAR is proud to run the most innovative and comprehensive SOAR Marketplace in the security space. With more than 990 content packs to choose...

Jul 06, 2023

By Bar Katzir

Announcement, Products and Services

Cortex Leads New Ways to Introduce AI-powered Capabilities

With AI and machine-learning at the forefront of innovation for Palo Alto Networks and Cortex, we are continuously finding new ways to improve and adv...

Jun 26, 2023

By Gonen Fink

Playbook of the Week

Playbook of the week: Streamlining SOC Communications

Getting confused while switching between the email client and incident response system.Copying and pasting the wrong incident into an email.

Jun 22, 2023

By Yarden Altmann

Playbook of the Week

Playbook of the Week: Automating SecOps Ticketing

If you work in SecOps, a good part of your day is likely spent managing incident cases, including the attendant tasks, in multiple systems such as ServiceNow, Jira, Zendesk, and more. Wouldn’t it be nice if you...

Jun 08, 2023

By Danil Vilenchik

Playbook of the Week

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

In today's increasingly complex digital landscape, user and entity behavior analytics (UEBA) has emerged as a crucial tool for organizations looking to enhance their cybersecurity...

May 25, 2023

By Omri Itzhak

Playbook of the Week

Playbook of the Week: Using ChatGPT in Cortex XSOAR

You might have used ChatGPT to help you write a script or generate an image. So now that you know Cortex XSOAR has a ChatGPT integration, are you wondering how you might apply it to your security operations to...

May 18, 2023

By Sameh Elhakim

Playbook of the Week

Playbook of the Week: Automate Anything with the Default Playbook

With Cortex XSOAR, the automation possibilities are only limited by your imagination (and API integrations). If you have explored our hundreds of out-of-the-box playbooks in the Co...

May 11, 2023

By Ido Van Dijk

Must-Read Articles

Build Your Customized Cortex XSOAR ROI Report

You know automation can help your team by reducing effort for manual and repetitive tasks, but conveying that value to the board can be tricky. Luckily, there's a calculator to make it simple!

May 09, 2023

By Melissa Thurman

Load more blogs