Palo Alto Networks

SOC

What’s New for Cortex and Cortex Cloud (Apr ‘25)

Discover cutting-edge advancements in security ops with the latest Cortex releases. New features enhance threat prevention, platform coverage, automation, and attack surface tests for streamlined and robust security management.

Must-Read Articles

News and Events

Playbook of the Week

May 05, 2025

By Scott Simkin

Palo Alto Networks

Products and Services

Partners

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...

Apr 03, 2025

By Omri Itzhak

Announcement, Event, News and Events

Palo Alto Networks Helps Secure Black Hat Asia 2025

Palo Alto Networks secures Black Hat Asia 2025 with pride. Our NOC and SOC involvement ensures uninterrupted conference experience for attendees.

Mar 19, 2025

By James Holland and Jason Reverri

Playbook of the Week, Product Features, Products and Services, Unit 42

Announcing Unit 42 Managed XSIAM — Redefining 24/7 Managed SecOps

Palo Alto Networks announces Unit 42 Managed XSIAM, a solution that provides 24/7 expert-led defense across every attack surface.

Mar 11, 2025

By Sharon Maydar

Playbook of the Week

Automating Response to Suspicious SaaS Access From a Tor Exit Node

This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.

Mar 06, 2025

By Arik Day

Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services

Introducing Cortex Cloud — The Future of Real-Time Cloud Security

Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...

Feb 13, 2025

By Elad Koren

Playbook of the Week

Automating Response to Unauthorized User Privilege Escalations Using PowerS...

Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command

Feb 05, 2025

By Omri Itzhak

Announcement, Must-Read Articles, News and Events

What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...

Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser,...

Feb 04, 2025

By Scott Simkin

Must-Read Articles, Product Features

Optimize Analyst Workflows with Cortex Copilot

Discover how Cortex Copilot streamlines security analyst workflows, reduces burnout, and accelerates incident investigations by leveraging AI to automate mundane tasks.

Nov 07, 2024

By Yitzy Tannenbaum

AI Governance, AI Security, Points of View

Shaking Up Security — The Power of AI-Native SOCs

Discover how AI-native SOCs revolutionize cybersecurity, reducing alert fatigue and improving threat detection. Transform your security operations with AI.

Nov 06, 2024

By Dena De Angelo

Announcement, Must-Read Articles, News and Events, Product Features

Cortex Copilot - Another Step Forward in SOC Transformation

Discover how Cortex Copilot, an AI-powered security assistant, transforms SOC operations by speeding up investigations and optimizing analyst workflow...

Oct 15, 2024

By Gil Blum

Must-Read Articles, News and Events, Product Features

What’s Next in Cortex: New Innovations for Security Operations

Cortex continues to transform the SOC with new innovations across the platform, including support for third-party EDR data to ease the transition from...

Sep 23, 2024

By Scott Simkin

Company & Culture, Education, Must-Read Articles, Product Features, Products and Services

Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI

AI is reshaping SOC analyst roles. We address the critical issue of burnout and discuss practical advice for thriving in...

Sep 04, 2024

By Dena De Angelo

Company & Culture, Products and Services, Unit 42

Creating a Security Program with Less Complexity and More Visibility

Our 2024 Incident Response Report shows how vulnerabilities go unpatched, and critical resources sit exposed.

May 23, 2024

By Unit 42

Product Features, Products and Services, Unit 42

Prowling the Wilds — Upgrade Your SOC and Hunt Down Threats

SOC leaders need to outfit their analysts with the right gear and training. Upgrade your SOC and analysts to hunt down the threats lurking in your net...

May 21, 2024

By Unit 42

Partner Integrations, Partners, Product Features, Products and Services

Simplify, Scale and Accelerate Your SOC with AI-Driven Security

Deloitte’s AI-Native Security Operations Platform, powered by Palo Alto Networks Cortex XSIAM, is designed to modernize your SOC.

Jan 25, 2024

By Kieran Norton, Principal, Deloitte & Touche LLP

Points of View, Products and Services

Beyond the Hype — Where AI Can Shine in Security

Discover the real-world impact of AI in cybersecurity with insights from experts at Palo Alto Networks and Unit 42. Dive into the proliferation of AI tools.

Jan 24, 2024

By Dena De Angelo

Announcement, Must-Read Articles, Product Features, Products and Services

XSIAM 2.0: Continuing to Drive SOC Transformation

Cortex XSIAM 2.0 is the latest innovation for delivering a converged platform, AI-driven outcomes and an automation-first approach for the modern SOC.

Nov 13, 2023

By Gonen Fink

Company & Culture, Public Sector

Securing Our World

It is the 20th anniversary of Cybersecurity Awareness Month – artificial intelligence and the reliance on cloud networks are no longer enough.

Oct 25, 2023

By Deontray Jones

Must-Read Articles, Product Features, Products and Services

Threat Hunting to Find the Good Stuff

Peter Havens from Cortex product marketing sits down with Leeroy Perera, staff security engineer to discuss the practice of threat hunting and how we apply it in our SOC.

Oct 17, 2023

By Dena De Angelo