Creating an Automated Workflow for Account Lockout Resolution
This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.
Palo Alto Networks
Cortex
Automating Response to Suspicious Process Executions
This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.
Automating Response to Suspicious SaaS Access From a Tor Exit Node
This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.
Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
Cortex Xpanse Protects Against Malicious Domain Takeover Techniques
Malicious domain takeovers have become an increasing concern for businesses as attackers exploit vulnerabilities by gaining unauthorized access to a d...
SSO Password Spray Playbook
Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command
What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...
Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser,...
Automating Response to Multi-Factor Authentication Threats
SEO Meta description
Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts
Automating Response to Unauthorized Email Forwarding Activity in Google Wor...
Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM
Handling Successful SSO Sign-ins from Tor
Automating response to successful Tor SSO sign-ins with Cortex XSIAM
Optimize Analyst Workflows with Cortex Copilot
Discover how Cortex Copilot streamlines security analyst workflows, reduces burnout, and accelerates incident investigations by leveraging AI to automate mundane tasks.
Cutting Through the Noise: Simplifying SIEM Alerts with Cortex
Discover how integrating Cortex XSOAR with Splunk SIEM reduces false positives, automates alert triage, and enhances cybersecurity efficiency.
Cortex Copilot - Another Step Forward in SOC Transformation
Discover how Cortex Copilot, an AI-powered security assistant, transforms SOC operations by speeding up investigations and optimizing analyst workflow...
What’s Next in Cortex: New Innovations for Security Operations
Cortex continues to transform the SOC with new innovations across the platform, including support for third-party EDR data to ease the transition from...
Identity Protection That Spans the Entire Attack Lifecycle
Palo Alto Networks Identity Threat Detection and Response (ITDR) offering emerges as a critical pillar of modern cybersecurity strategy.
The Power of AI Assistants and Advanced Threat Detection
Explore predictions on AI in cybersecurity and cultivating a cyber-aware culture. Discover the emergence of AI-powered cybersecurity assistants.
5 Unique Challenges for AI in Cybersecurity
There are challenges for AI in cybersecurity in real-world environments with high precision, requiring specialization in the specific field of study.
Unit 42 MDR Recognized as a Leader in MDR
Palo Alto Networks announces that Unit 42 MDR has been named as a leader in the Frost Radar™: Global MDR Market evaluation.
Harnessing the Power of AI in Cybersecurity — Predictions and Solutions
Discover how AI in cybersecurity reshapes careers. Explore near-term predictions, medium-term impacts and long-term visions with insights from Chris S...
This Is How We Do It — Season One Recap
“This is How We Do It” offers a behind-the-scenes, candid exposé of how Palo Alto Networks protects its SOC using its own solutions.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.