Palo Alto Networks

playbook of the week

Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer Exploitation

Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying and mitigating exploitation

Must-Read Articles

News and Events

Playbook of the Week

May 15, 2025

By Sasha Sokolovich

Palo Alto Networks

Products and Services

Partners

Playbook of the Week

SSO Password Spray Playbook

Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.

Feb 13, 2025

By Karina Fishman

Playbook of the Week

Automating Response to Multi-Factor Authentication Threats

SEO Meta description Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts

Jan 30, 2025

By Tomer Haimof

Playbook of the Week, Product Features

Automating Response to Unauthorized Email Forwarding Activity in Google Wor...

Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM

Jan 28, 2025

By Arik Day

Playbook of the Week

An Automated Response to Malicious Pod Activity

Automated playbook for effectively tackling malicious activity within Kubernetes clusters.

Aug 15, 2024

By Ben Melamed

Playbook of the Week

Rapid Response for Fighting Ursa Phishing Campaign

Automated playbook to speed response to Russian threat actor, Fighting Ursa, APT phishing campaign offering diplomatic cars for sale.

Aug 08, 2024

By Ben Melamed

Rapid Response for OpenSSH Vulnerability CVE-2024-6387

Automated playbook to speed response to CVE-2024-6387, OpenSSH vulnerability

Jul 12, 2024

By Jane Goh

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Response to Living-Off-the-Land (LOTL) Att...

Defend against stealthy LOTL attacks leveraging common tools and LOLBins. Cortex XDR automates detection, investigation, and remediation of suspicious...

May 09, 2024

By Erez Felman Dar

Playbook of the Week

Playbook of the Week: Prisma Cloud Compute - Compliance Alert v2

Empower compliance alert management with Cortex XSOAR. Enriched data, dedicated layouts, and streamlined workflows ensure proactive risk mitigation.

Apr 11, 2024

By Tomer Haimof

Playbook of the Week

Playbook of the Week: Streamlining Suspicious Data Upload Alert Investigati...

The Cortex XSOAR XDR large-upload playbook is designed to streamline the management of Cortex XDR analytics “large upload” alerts, speeding the investigation process and providing ...

Apr 05, 2024

By Tal Nossen

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Management of XDR Identity Analytics Alert...

Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.

Mar 07, 2024

By Omri Itzhak

Playbook of the Week

Playbook of the Week: Using YARA to Automate Malware Identification and Cla...

Using YARA in Cortex XSOAR to automatically identify and classify malware.

Feb 01, 2024

By Yarden Altmann

Playbook of the Week

Playbook of the Week: Prisma Cloud Compute - Audit Alert v3

The Cortex XSOAR's Prisma Cloud Compute - Audit Alert v3 playbook emerges as a reliable ally, ensuring runtime audit events are not just responded to but proactively managed.

Jan 25, 2024

By Tomer Haimof

Playbook of the Week

Playbook of the Week: XSOAR Common Playbooks

Foundational playbooks for automating the most common SOC use cases

Jan 11, 2024

By Tal Nossen

Playbook of the Week

Introducing New XSOAR Capture the Flags!

Capture the Flag content packs for a fun, interactive introduction to Cortex XSOAR

Dec 14, 2023

By Sasha Sokolovich

Playbook of the Week

Bootstrap Your Threat Intel Management Program With Free Feeds and IOC Enri...

Leveraging automation to manage and optimize value from your threat feed subscriptions, particularly free feeds and IOC enrichers.

Dec 07, 2023

By Dror Avrahami

Announcement, Playbook of the Week

Playbook of the Week: Streamlining the management of XDR Incidents

The Cortex XSOAR XDR Lite playbook streamlines the handling of XDR alerts, by automating the repetitive tasks associated with incident response.

Nov 09, 2023

By Omri Itzhak

Playbook of the Week

Playbook of the Week: Unleash the Power of Identity Threat Intelligence wit...

The Cortex XSOAR Prisma Cloud Virtual Machine (VM) Alert Prioritization content pack helps cloud security operations teams prioritize and manage these alerts.

Oct 24, 2023

By Ido Van Dijk