Palo Alto Networks

SOAR

XSOAR Comes Up as the Leader in SOAR Comparisons

Reviews have become an integral part of our decision-making processes. From choosing gadgets and cars to selecting a trendy restaurant, we heavily rely on reviews in both our personal and professional lives. However, when it comes to the cybersecurity space, transparent reviews are somewhat scarce.

For those seeking opinions in the cyber realm, platforms like reddit often serve as a go-to source. Tools such as the common SIEMs have robust communi...

Must-Read Articles

Use-Cases

Nov 29, 2023

By Ethan Packard

Palo Alto Networks

Products and Services

Partners

Announcement, Must-Read Articles, Product Features, Products and Services

XSIAM 2.0: Continuing to Drive SOC Transformation

Security teams have an important and difficult job – protecting their organizations from a threat landscape that is constantly changing. Based on investigations conducted by our Un...

Nov 13, 2023

By Gonen Fink

Announcement, Playbook of the Week

Playbook of the Week: Streamlining the management of XDR Incidents

The new Cortex XDR Lite - Incident Handling playbook is a new addition to the Palo Alto Networks Cortex XDR - Investigation and Response content pack....

Nov 09, 2023

By Omri Itzhak

Announcement, Must-Read Articles, Product Features

XSOAR 8.4: What’s New

Earlier this year we announced our software as a service (SaaS) offering with the Cortex XSOAR 8 release. XSOAR 8 offers the benefits of tight integration with the industry-leading Cortex platform and its other cybersecurity products. In ad...

Oct 30, 2023

By Alon Yardeni

Playbook of the Week

Playbook of the Week: Unleash the Power of Identity Threat Intelligence wit...

When it comes to detecting identity-related threats, security teams need to distinguish between suspicious but benign activity and truly malicious activity. This can be challenging...

Oct 24, 2023

By Ido Van Dijk

Playbook of the Week

Playbook of the Week: Automating DLP Incident Feedback

In today's digital landscape, data loss prevention (DLP) solutions have become a critical component for keeping sensitive data secure in an organization. With an increasing amount of data being generated and sh...

Sep 07, 2023

By Tomer Haimof

Playbook of the Week

Playbook of the Week: Swallow Traffic to Malicious Domains with DNS Sinkhol...

When you hear about sinkholes, it’s not necessarily a good thing. However, in the cybersecurity realm, DNS sinkholing is a technique used to redirect DNS queries for malicious doma...

Aug 31, 2023

By Ido Van Dijk

Playbook of the Week

Playbook of the Week: Using CVEs in Incident Investigation

The Common Vulnerabilities and Exposures (CVE) repository is designed to provide a reference for a publicly known information security vulnerability. CVE identifiers, or CVEs, are...

Aug 03, 2023

By Dror Avrahami

Playbook of the Week: Microsoft Office and Windows HTML RCE CVE-2023-36884 ...

Patch Tuesday - not the favorite day of the month for your security team as zero-day threat alerts or newly discovered vulnerabilities invariably lead to a disrupted work schedule that involves multiple teams a...

Jul 20, 2023

By Jane Goh

Announcement, Must-Read Articles, News and Events

Cortex XSOAR Marketplace’s Top Contributors for April - June 2023!

Cortex XSOAR is proud to run the most innovative and comprehensive SOAR Marketplace in the security space. With more than 990 content packs to choose...

Jul 06, 2023

By Bar Katzir

Announcement, Must-Read Articles, Product Features, Use-Cases

Not in My Sandbox: Save Those Deployment Tears

Efficiency in a security operations center (SOC) is more than just ensuring security professionals are successfully responding to threats. A successful SOC works to maximize its op...

Jun 28, 2023

By Greg Smith

Playbook of the Week

Playbook of the week: Streamlining SOC Communications

Getting confused while switching between the email client and incident response system.Copying and pasting the wrong incident into an email.

Jun 22, 2023

By Yarden Altmann

Playbook of the Week

Playbook of the Week: Automating SecOps Ticketing

If you work in SecOps, a good part of your day is likely spent managing incident cases, including the attendant tasks, in multiple systems such as ServiceNow, Jira, Zendesk, and more. Wouldn’t it be nice if you...

Jun 08, 2023

By Danil Vilenchik

Playbook of the Week

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

In today's increasingly complex digital landscape, user and entity behavior analytics (UEBA) has emerged as a crucial tool for organizations looking to enhance their cybersecurity...

May 25, 2023

By Omri Itzhak

Playbook of the Week

Playbook of the Week: Using ChatGPT in Cortex XSOAR

You might have used ChatGPT to help you write a script or generate an image. So now that you know Cortex XSOAR has a ChatGPT integration, are you wondering how you might apply it to your security operations to...

May 18, 2023

By Sameh Elhakim

Must-Read Articles, News and Events

An Ode to SOAR

Delivering ops efficiencies beyond compare,Stands XSOAR, the OG of SOAR.

May 12, 2023

By Jane Goh and Michael Heller

Playbook of the Week

Playbook of the Week: Automate Anything with the Default Playbook

With Cortex XSOAR, the automation possibilities are only limited by your imagination (and API integrations). If you have explored our hundreds of out-of-the-box playbooks in the Co...

May 11, 2023

By Ido Van Dijk

Must-Read Articles

Build Your Customized Cortex XSOAR ROI Report

You know automation can help your team by reducing effort for manual and repetitive tasks, but conveying that value to the board can be tricky. Luckily, there's a calculator to make it simple!

May 09, 2023

By Melissa Thurman

Playbook of the Week

Playbook of the week: Responding to RDP Brute Force Attacks

Remote Desktop Protocol (RDP) is a widely used technology that allows users to remotely access and control computers and servers over a network connection. It is commonly used by o...

May 04, 2023

By Arik Day

Playbook of the Week, Product Features

Playbook of the Week: Automating Password Resets with Chatbot

“Hi, I can’t seem to login, can someone please reset my password? I need to get on a call soon”. Does that sound familiar to you?

Apr 27, 2023

By Ido Van Dijk

Playbook of the Week

Playbook of the Week: Automating Malicious File Detonation with Joe Securit...

The role of a security analyst has evolved significantly over the years, as the nature of cybersecurity threats have become increasingly sophisticated and complex. Today's security...

Apr 20, 2023

By Arad Carmi

Load more blogs