[](https://www.paloaltonetworks.com/?ts=markdown) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products Products AI Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) Network Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) SASE [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) Security Operations [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) Cloud Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) Observability ^NEW^ [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) Identity Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [![Overview icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Overview](#products-panel-0) * [![AI Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) AI Security](#products-panel-1) * [![Network Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Network Security](#products-panel-2) * [![SASE icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) SASE](#products-panel-3) * [![Security Operations icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Security Operations](#products-panel-4) * [![Cloud Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Cloud Security](#products-panel-5) * [Observability ^NEW^](#products-panel-6) * [![Identity Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Identity Security](#products-panel-7) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) [![AI Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg) AI Security Discover, assess and protect AI apps, agents and employee use of GenAI tools](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [![Network Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg) Network Security AI-powered NetSec with next-gen firewalls, inline defense and unified management](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Security Operations icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg) Security Operations Stop cyberattackers with the industry's premier platform for autonomous security operations](https://www.paloaltonetworks.com/cortex?ts=markdown) [![Observability \& Remediation NEW icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg) Observability \& Remediation ^NEW^ Prevent downtime with the AI-driven platform that delivers autonomous remediation](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![SASE icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg) SASE Protect with AI, secure AI use and operate with AI using agentic Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) [![Identity Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg) Identity Security Identity security platform to secure every identity: human, machine and agentic](https://www.paloaltonetworks.com/idira?ts=markdown) [![Cloud Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg) Cloud Security Prevent risks from code to cloud with the leading agentic cloud security platform](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![AI Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) [![Network Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) [![SASE logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) [![Security Operations logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) [![Cloud Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) [![Observability NEW logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) [![Identity Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * Solutions Solutions By Use Case [![Drive AI Transformation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ai-page/teaser-block/teaser-icon-2.svg) Drive AI Transformation Scale enterprise AI adoption across employees, applications and agents with confidence and control](https://www.paloaltonetworks.com/ai-security?ts=markdown) [![Accelerate Cloud Transformation icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Accelerate Cloud Transformation Build fast and innovate fearlessly with AI-driven protection from code to cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![Secure AI Coding icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure AI Coding Let AI coding do more, with you in control. Protect data, govern agents and control AI costs](https://www.paloaltonetworks.com/secure-ai-coding?ts=markdown) [![Secure Every Identity icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Secure Every Identity Stop identity-led breaches: Secure human, machine, and agentic identities with zero trust](https://www.paloaltonetworks.com/idira?ts=markdown) [![Enable Autonomous SOC icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Enable Autonomous SOC Fight AI with AI to stop threats at machine speed with the power of analytics and automation](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) [![Secure Critical Infrastructure icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure Critical Infrastructure Stop machine-speed threats across OT, 5G and IoT with AI-driven cyber defense](https://www.paloaltonetworks.com/securing-critical-infrastructure?ts=markdown) [![Secure the Hybrid Network icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Secure the Hybrid Network Stay ahead of AI-driven attacks with unified network security across hybrid environments](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Automate Root-Cause Analysis icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Automate Root-Cause Analysis Respond autonomously to incidents and accelerate remediation with agentic AI](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![Frontier AI Defense icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-Unit42.svg) Frontier AI Defense Use defender-grade models to stop AI-speed attacks before they start](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * Services Services Security Services [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) Customer Services [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Services Overview](#services-panel-0) * [Security Services](#services-panel-1) * [Managed Firewalls](#services-panel-2) * [Customer Services](#services-panel-3) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) [![Security Services logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) * Industries Industries [![Financial Services icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/financial-icon-2.svg) Financial Services Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) [![Manufacturing icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/manufacturing-icon-2.svg) Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) [![Retail and Hospitality icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/retail-icon-2.svg) Retail and Hospitality Secure with payment security, PCI compliance, ransomware and fraud prevention, and data protection](https://www.paloaltonetworks.com/industry/retail?ts=markdown) [![Healthcare and Life Sciences icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/healthcare-icon-2.svg) Healthcare and Life Sciences Secure patient and clinical data, medical device security, ransomware defense, and HIPAA compliance](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) [![Public Sector icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/public-sector-icon-2.svg) Public Sector Secure with Zero Trust, cyber defense, compliance, infrastructure protection, and citizen data security](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) [![Utilities icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/utilities-icon-2.svg) Utilities Secure with power grid protection, OT network security, ransomware defense, and critical infrastructure security](https://www.paloaltonetworks.com/industry/electric-utilities?ts=markdown) [![Transportation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/transportation-icon-2.svg) Transportation Secure OT and connected infrastructure protection, ransomware defense, supply chain security, compliance](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) [![Small and Medium Business icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/smb-icon-2.svg) Small and Medium Business Secure against cyber threats using AI-powered endpoint, network, browser, cloud, and MDR](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Partners Partners NextWave * [Partner Program](https://www.paloaltonetworks.com/partners/nextwave-partner-portal-login?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Partner Portal Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Partner Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) Partner Ecosystem [Explore All Partners Find the right partner network tailored to your business needs, cloud environments, and security requirements](https://www.paloaltonetworks.com/partners?ts=markdown) [Cloud Service Partners Bring cloud native security and compliance to the entire development lifecycle](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) [Frontier AI Alliance Outpace today's cyberattacks through a global ecosystem of leaders orchestrating unified defenses](https://www.paloaltonetworks.com/frontier?ts=markdown) [Global System Integrators Speed and secure digital transformation with the industry's best technology, people and intelligence](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) [Managed Security Service Providers Gain valuable resource oversight to help your businesses administer security strategies](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) [Resellers Deliver the most comprehensive cybersecurity portfolio while expanding opportunities and profitability](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) [Service Providers Protect mobile users, devices and applications with effective, flexible and easy to deploy cybersecurity](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) [Technology Partners Advance security and transformation with innovative technology partner integrations](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * Resources Resources ![Learn icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/resource-library-icon.svg) Learn * [Resource Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Analyst Reports](https://www.paloaltonetworks.com/resources/research?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Threat Vector Podcast](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Knowledgebase](https://knowledgebase.paloaltonetworks.com/) * [Technical Documentation](https://docs.paloaltonetworks.com/) ![Engage icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/engage-icon-2.svg) Engage * [Webinars](https://www.paloaltonetworks.com/resources/webinars?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Test Drive](https://www.paloaltonetworks.com/resources/test-drives?ts=markdown) * [On-Demand](https://www.paloaltonetworks.com/ondemand?ts=markdown) ![Connect icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/connect-icon-2.svg) Connect * [Executive Briefings](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Events](https://events.paloaltonetworks.com/) * [Live Community](https://live.paloaltonetworks.com/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) ![Discover icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/discover-icon-2.svg) Discover * [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) ![Company icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Office Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * ![search magnifying glass](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * us Language * USA (ENGLISH) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au/cyberpedia/how-edr-leverages-machine-learning) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br/cyberpedia/how-edr-leverages-machine-learning) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca/cyberpedia/how-edr-leverages-machine-learning) * [CHINA (简体中文)](https://www.paloaltonetworks.cn/cyberpedia/how-edr-leverages-machine-learning) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr/cyberpedia/how-edr-leverages-machine-learning) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de/cyberpedia/how-edr-leverages-machine-learning) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in/cyberpedia/how-edr-leverages-machine-learning) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it/cyberpedia/how-edr-leverages-machine-learning) * [JAPAN (日本語)](https://www.paloaltonetworks.jp/cyberpedia/how-edr-leverages-machine-learning) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr/cyberpedia/how-edr-leverages-machine-learning) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat/cyberpedia/how-edr-leverages-machine-learning) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx/cyberpedia/how-edr-leverages-machine-learning) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg/cyberpedia/how-edr-leverages-machine-learning) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es/cyberpedia/how-edr-leverages-machine-learning) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw/cyberpedia/how-edr-leverages-machine-learning) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk/cyberpedia/how-edr-leverages-machine-learning) * Accounts \& Support Accounts \& Support * Accounts * Customer * Partner * Employee * [Login to Download](https://www.paloaltonetworks.com/login?ts=markdown) * [Become a Member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * Support * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) [Introducing Cortex XCOR: Observability, reimagined. Discover now.](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [Security Operations](https://www.paloaltonetworks.com/cyberpedia/security-operations?ts=markdown) 3. [EDR](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr?ts=markdown) 4. [How Does EDR Leverage Machine Learning?](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning?ts=markdown) Table of Contents * [What Is Endpoint Detection and Response (EDR)?](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr?ts=markdown) * [Understanding EDR](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#understanding?ts=markdown) * [Key Benefits of EDR Solutions](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#key?ts=markdown) * [How EDR Works: A Detailed Breakdown](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#how?ts=markdown) * [Evolution of EDR](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#evolution?ts=markdown) * [EDR Implementation Process](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#process?ts=markdown) * [Common Challenges and Solutions in EDR Adoption](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#common?ts=markdown) * [Advanced EDR Strategies and Optimization Techniques](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#advanced?ts=markdown) * [EDR and the Evolving Threat Landscape](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#landscape?ts=markdown) * [Comparison of EDR with Other Security Solutions](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr##?ts=markdown) * [How to Evaluate an EDR Solution](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#solution?ts=markdown) * [EDR FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr#faqs?ts=markdown) * [Best EDR Solutions (2026): Top 9 Endpoint Detection \& Response Tools](https://www.paloaltonetworks.com/cyberpedia/edr-solutions?ts=markdown) * [What Are EDR Solutions and Why Do They Matter](https://www.paloaltonetworks.com/cyberpedia/edr-solutions#what?ts=markdown) * [Key EDR Trends to Watch in 2026](https://www.paloaltonetworks.com/cyberpedia/edr-solutions#key?ts=markdown) * [9 Best EDR Solutions for 2026](https://www.paloaltonetworks.com/cyberpedia/edr-solutions#best?ts=markdown) * [How to Choose the Best EDR Tool](https://www.paloaltonetworks.com/cyberpedia/edr-solutions#how?ts=markdown) * [EDR Solutions and Tools FAQs](https://www.paloaltonetworks.com/cyberpedia/edr-solutions#faqs?ts=markdown) * [How Does EDR Enhance Small Business Cybersecurity?](https://www.paloaltonetworks.com/cyberpedia/edr-for-small-business-cybersecurity?ts=markdown) * [What is EDR?](https://www.paloaltonetworks.com/cyberpedia/edr-for-small-business-cybersecurity#what?ts=markdown) * [EDR Benefits for Small Businesses](https://www.paloaltonetworks.com/cyberpedia/edr-for-small-business-cybersecurity#edr?ts=markdown) * [Traditional Antivirus vs EDR vs XDR](https://www.paloaltonetworks.com/cyberpedia/edr-for-small-business-cybersecurity#taditional?ts=markdown) * [EDR for Small Business FAQs](https://www.paloaltonetworks.com/cyberpedia/edr-for-small-business-cybersecurity#faqs?ts=markdown) * [What Are Endpoint Detection and Response Tools?](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools?ts=markdown) * [Endpoint Detection and Response Overview](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#endpoint?ts=markdown) * [Control Points of EDR Tools](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#control?ts=markdown) * [EDR Critical Capabilities](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#critical?ts=markdown) * [Visibility and Efficiency EDR Feature Evaluation Checklists](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#visibility?ts=markdown) * [Endpoints Supported by EDR Tools](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#endpoints?ts=markdown) * [Benefits of EDR Tools](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#benefits?ts=markdown) * [Deployment of EDR Tools](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#deployment?ts=markdown) * [EDR Tools vs. EDR Services](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#tools?ts=markdown) * [EDR Use Cases](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#usecases?ts=markdown) * [EDR Tools FAQs](https://www.paloaltonetworks.com/cyberpedia/what-are-endpoint-detection-and-response-tools#faqs?ts=markdown) * [What Is Endpoint Detection and Response (EDR) Management?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management?ts=markdown) * [EDR Management Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#edr?ts=markdown) * [Key Capabilities of EDR Management](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#capabilities?ts=markdown) * [The Crucial Role of EDR Management in Modern Cybersecurity](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#crucial?ts=markdown) * [EDR Management Challenges and Solutions](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#solutions?ts=markdown) * [Best Practices for Effective EDR Management](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#best?ts=markdown) * [EDR vs. EPP: A Complementary Relationship](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#vs?ts=markdown) * [Integrating EDR Management with a Broader Security Ecosystem](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#integrating?ts=markdown) * [Case Study of a Successful EDR Implementation](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#implementation?ts=markdown) * [EDR Management FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management#faqs?ts=markdown) * [What Is Endpoint Detection and Response (EDR) Deployment?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment?ts=markdown) * [Understanding EDR Deployment](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#understanding?ts=markdown) * [Key Benefits of Implementing EDR Solutions](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#benefits?ts=markdown) * [EDR Preparation and Deployment Steps](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#preparation?ts=markdown) * [Operational Considerations for EDR](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#operational?ts=markdown) * [Addressing Challenges in EDR Deployment](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#challenges?ts=markdown) * [Maximizing the Value of Your EDR Deployment](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#maximizing?ts=markdown) * [EDR Deployment FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-deployment#faqs?ts=markdown) * [What is EDR-as-a-Service Managed Security?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-as-a-service-managed-security?ts=markdown) * [EDR: Definition and Importance](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-as-a-service-managed-security#edr?ts=markdown) * [How Does EDR Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-as-a-service-managed-security#how?ts=markdown) * [EDR Solutions in the Market](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-as-a-service-managed-security#solutions?ts=markdown) * [EDR-as-a-Service Managed Security FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-as-a-service-managed-security#faqs?ts=markdown) * [What is EDR vs. Antivirus?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus?ts=markdown) * [What is Antivirus?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#what?ts=markdown) * [What is EDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#edr?ts=markdown) * [Use Cases for Antivirus](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#use?ts=markdown) * [Use Cases for EDR](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#cases?ts=markdown) * [How EDR Differs From MDR and XDR](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#how?ts=markdown) * [EDR vs. Antivirus FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus#faqs?ts=markdown) * How Does EDR Leverage Machine Learning? * [How EDR and ML Work Together](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#how?ts=markdown) * [How EDR Leverages Machine Learning](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#learning?ts=markdown) * [Workflow Example of EDR and Machine Learning Integration](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#workflow?ts=markdown) * [The Future of EDR: Predictions and Emerging Trends](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#the?ts=markdown) * [How EDR Leverages Machine Learning FAQs](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#faqs?ts=markdown) * [What Is Endpoint Detection and Response (EDR) Compliance?](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance?ts=markdown) * [What is EDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#what?ts=markdown) * [Why EDR Compliance Is Important](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#why?ts=markdown) * [Key Steps for EDR Compliance](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#key?ts=markdown) * [EDR Non-Compliance Consequences](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#consequences?ts=markdown) * [What to Look for in an EDR Compliance Solution](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#solution?ts=markdown) * [EDR Compliance FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance#faqs?ts=markdown) * [What is the Difference Between EDR vs. SIEM?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem?ts=markdown) * [What is SIEM?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem#siem?ts=markdown) * [What is EDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem#edr?ts=markdown) * [A Detailed Comparison of EDR and SIEM](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem#compare?ts=markdown) * [SIEM vs SOAR](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem#siem-vs-soar?ts=markdown) * [SIEM vs EDR FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-siem#faq?ts=markdown) * [What is EDR vs. XDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr?ts=markdown) * [EDR and XDR Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr#what?ts=markdown) * [Importance of EDR and XDR in Cybersecurity](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr#importance?ts=markdown) * [EDR vs. XDR: Key Differences](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr#differences?ts=markdown) * [Which Is Better: EDR or XDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr#which?ts=markdown) * [EDR vs. XDR FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-xdr#faq?ts=markdown) # How Does EDR Leverage Machine Learning? 5 min. read Table of Contents * * [How EDR and ML Work Together](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#how?ts=markdown) * [How EDR Leverages Machine Learning](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#learning?ts=markdown) * [Workflow Example of EDR and Machine Learning Integration](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#workflow?ts=markdown) * [The Future of EDR: Predictions and Emerging Trends](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#the?ts=markdown) * [How EDR Leverages Machine Learning FAQs](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#faqs?ts=markdown) 1. How EDR and ML Work Together * * [How EDR and ML Work Together](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#how?ts=markdown) * [How EDR Leverages Machine Learning](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#learning?ts=markdown) * [Workflow Example of EDR and Machine Learning Integration](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#workflow?ts=markdown) * [The Future of EDR: Predictions and Emerging Trends](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#the?ts=markdown) * [How EDR Leverages Machine Learning FAQs](https://www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning#faqs?ts=markdown) Machine learning is a subset of artificial intelligence (AI) that involves training algorithms to recognize patterns and make data-based decisions. EDR leverages machine learning to improve its ability to detect, analyze, and respond to threats in real time, making it a critical component of modern cybersecurity strategies. In the context of EDR, machine learning enhances the capabilities of threat detection and response by: * Behavioral Analysis: Machine learning algorithms analyze the behavior of applications and processes on endpoints to detect anomalies that may indicate [malicious activity](https://www.paloaltonetworks.com/cyberpedia/what-is-malware-protection?ts=markdown). * Threat Intelligence: Machine learning models continuously learn from new data to improve their understanding of known and emerging threats, enhancing threat detection accuracy. * Predictive Analytics: Machine learning can predict potential threats based on historical data and patterns, allowing proactive threat mitigation. * Automated Response: Machine learning enables automated responses to identified threats, reducing the time to mitigate and remediate security incidents. ## How EDR and ML Work Together In today's rapidly evolving cybersecurity landscape, Endpoint Detection and Response (EDR) systems increasingly integrate machine learning to enhance their threat detection and response capabilities. By leveraging machine learning, EDR systems can analyze vast amounts of data in real time, identify complex patterns and anomalies, and respond to threats with unprecedented speed and accuracy. This powerful combination enables organizations to proactively defend against sophisticated cyber threats, reduce false positives, and continuously adapt to new and emerging attack vectors. EDR and machine learning create a dynamic, intelligent defense strategy that fortifies endpoint security and ensures robust protection against advanced cyber threats. ### Data Collection in EDR Systems EDR continuously collects vast amounts of data from [endpoints](https://www.paloaltonetworks.com/cyberpedia/what-is-an-endpoint?ts=markdown), including system logs, running processes, network activities, file modifications, and user behaviors. This data provides a comprehensive view of the endpoint's state and activities, essential for identifying and responding to threats. Machine learning utilizes the collected data to train models and algorithms. The extensive dataset helps machine learning systems learn normal and abnormal patterns, enabling them to identify potential security threats accurately. ### Threat Detection with EDR and Machine Learning EDR utilizes predefined rules and signatures to detect known threats. These rules are based on previously identified attack patterns and behaviors, providing a foundational layer of security. Machine learning enhances threat detection by identifying anomalies and patterns that deviate from normal behavior, even if they don't match known signatures. This capability is crucial for detecting [new, unknown threats](https://www.paloaltonetworks.com/cyberpedia/what-is-dns-tunneling?ts=markdown) (zero-day threats) that traditional signature-based methods might miss. ### Behavioral Analysis for Enhanced Security EDR monitors the behavior of applications and processes on endpoints, looking for suspicious activities that could indicate a security breach. Machine learning analyzes these behaviors in real time, using historical data to differentiate between benign and malicious activities. It can detect subtle changes in behavior that may indicate an advanced persistent threat (APT), providing an additional layer of security. ### Predictive Analytics in EDR EDR primarily focuses on responding to threats as they occur, providing real-time protection against ongoing attacks. Machine learning introduces predictive analytics by identifying potential threats based on patterns and trends in historical data. This predictive capability allows organizations to take proactive measures, reducing the risk of future attacks and improving overall security posture. ### Automated Response with Machine Learning EDR can be configured to respond to detected threats with predefined actions, such as isolating an affected endpoint or terminating a malicious process. Machine learning enhances automated responses by continuously learning from each incident. This feedback loop helps refine response strategies, making them more effective. Machine learning models can adapt to new threats, ensuring that automated responses remain relevant and efficient. ### Forensic Analysis Enhanced by Machine Learning EDR provides detailed [forensic analysis](https://www.paloaltonetworks.com/cyberpedia/what-is-the-role-of-edr-in-dfir-digital-forensics-and-incident-response?ts=markdown) to understand the scope and impact of an attack, helping security teams investigate and respond effectively. Machine learning enhances forensic capabilities by identifying connections and correlations between events and activities. This more profound insight into the attack's origin and behavior allows for more thorough investigations and better-informed responses. ## How EDR Leverages Machine Learning ### Anomaly Detection with Machine Learning Machine learning models in EDR systems are trained to recognize normal behavior on endpoints. When deviations from this norm occur, the system flags them as potential threats. This method is particularly effective for detecting previously unknown threats, providing an additional layer of security beyond traditional signature-based detection. ### Pattern Recognition and Threat Detection Machine learning excels at recognizing complex patterns in large datasets. EDR leverages this capability to identify patterns associated with malicious activities that traditional rule-based systems might miss. This enhanced pattern recognition improves the accuracy and efficiency of [threat detection](https://www.paloaltonetworks.com/cyberpedia/what-is-extended-detection-response-XDR?ts=markdown). ### Integrating Threat Intelligence Machine learning integrates threat intelligence feeds, learning from global threat data to stay updated on the latest attack vectors and techniques. This continuous learning process ensures that EDR systems can detect new and evolving threats, keeping the organization's defenses current and robust. ### Reducing False Positives with Machine Learning One of the challenges in threat detection is the high number of false positives. Machine learning helps EDR systems reduce false positives by accurately distinguishing between legitimate and malicious activities based on historical data and behavioral analysis. This reduction in false positives allows security teams to focus on genuine threats, improving overall efficiency. ### Real-Time Processing for Immediate Threat Response Machine learning models process data in real time, allowing EDR systems to instantly detect and respond to threats. This real-time capability is crucial for minimizing the impact of attacks and preventing lateral movement within the network. Immediate threat response ensures that potential breaches are contained and mitigated swiftly. ### Adaptive Learning for Evolving Threats Machine learning models continuously learn from new data, adapting to changing environments and evolving threats. This adaptive learning ensures that EDR systems remain effective, even as attackers develop new techniques. The continuous improvement of machine learning models keeps the organization's defenses robust and up-to-date. ## Workflow Example of EDR and Machine Learning Integration By leveraging machine learning, EDR systems become more intelligent, adaptive, and capable of handling sophisticated and evolving cyber threats, providing a robust defense mechanism for organizations. The integration of machine learning enhances the overall effectiveness of EDR, ensuring comprehensive and proactive cybersecurity. **Data Ingestion and Baseline Establishment** * **EDR** collects data from endpoints, including logs, processes, and user behaviors. * Machine Learning models process and analyze this data to establish a baseline of normal behavior, creating a reference point for detecting anomalies. **Continuous Monitoring for Anomaly Detection** * **EDR** monitors endpoints for deviations from the established baseline. * Machine Learning algorithms analyze real-time data to detect anomalies, identifying potential threats that deviate from normal patterns. **Threat Detection and Analysis** * When an anomaly is detected, **EDR** flags it for further analysis. * **Machine Learning** models assess the anomaly, determining its likelihood of being a threat based on learned patterns and historical data. This assessment helps prioritize and categorize potential threats. **Automated Response and Continuous Improvement** * If a threat is confirmed, **EDR** can initiate automated responses such as isolating the affected endpoint, terminating malicious processes, and notifying security teams. * **Machine Learning** helps refine these responses by learning from each incident, improving the accuracy and effectiveness of future responses. This continuous improvement ensures that EDR systems adapt to new threats. ![Endpoint Evolution to EDR: A Good Start, but not Enough](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/how-edr-leverages-machine-learning/endpoint-evolution-to-edr.png) ## The Future of EDR: Predictions and Emerging Trends AI has become a common buzzword in today's technological landscape. AI-driven security solutions allow EDR systems to continuously learn from attackers and threats while developing strategies to combat them. Today's enterprises, however, require comprehensive security coverage across multiple environments, enhanced threat detection through data correlation, and streamlined security operations offered by a new, revolutionary solution: Extended Detection and Response (XDR). XDR integrates data from multiple security layers to enable better detection of sophisticated threats, leveraging machine learning and analytics. It provides a unified platform for managing and analyzing security data, improving efficiency and response times for security teams. Additionally, it helps analysts identify hidden threats by analyzing behavioral anomalies across endpoints, networks, and cloud services. Discover a new approach to threat detection and response that provides holistic protection against cyberattacks: [What is XDR?](https://www.paloaltonetworks.com/cyberpedia/what-is-extended-detection-response-XDR?ts=markdown) Organizations must try to stay ahead of attackers in the cybersecurity landscape. Attackers constantly develop new forms of malicious programs and probe defenses to see what works. To keep up with these threats, security technology must continue to evolve, as EDR has evolved into XDR. ## How EDR Leverages Machine Learning FAQs ### How does machine learning enhance EDR capabilities? Machine learning enhances EDR by enabling the detection of sophisticated and emerging threats that signature-based methods cannot detect. ML algorithms can analyze vast amounts of endpoint data to identify patterns and anomalies indicative of malicious activity. This allows for more accurate and timely threat detection, reducing false positives and improving the overall effectiveness of the EDR system. ### What should organizations consider when choosing an EDR solution? Key considerations include: * Integration with existing infrastructure: Ensuring the EDR solution integrates seamlessly with current IT and security systems. * Ease of use and management: The solution should be user-friendly and manageable with available resources. * Detection and response capabilities: Evaluating the effectiveness of the EDR's threat detection, analysis, and response features. * Scalability and performance: The ability to handle the organization's size and complexity without performance degradation. * Support and updates: Availability of vendor support, regular updates, and access to threat intelligence to keep the solution current with evolving threats. ### How do you evaluate the performance of a machine learning model? The performance of a machine learning model is evaluated using various metrics depending on the type of problem. Common metrics include: * Accuracy: The proportion of correctly classified instances out of the total instances. * Precision, Recall, and F1 Score: Metrics used in classification tasks to evaluate the relevance of the results. * Mean Squared Error (MSE): Used in regression tasks to measure the average squared difference between predicted and actual values. * AUC-ROC: The area under the receiver operating characteristic curve is used to measure the ability of a classifier to distinguish between classes. ### What are some common challenges in machine learning? Common challenges include: * Data Quality: Ensuring that the data used for training is clean, accurate, and representative. * Overfitting and Underfitting: Balancing the complexity of the model to avoid overfitting (the model too closely fits the training data) and underfitting (the model is too simple to capture the underlying patterns). * Scalability: Handling large volumes of data efficiently. * Bias and Fairness: Ensuring that models do not learn and perpetuate biases present in the training data. Related content [What is EDR? Learn about Endpoint Detection and Response](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-management?ts=markdown) [Cortex by Palo Alto Networks Discover the SecOps platform that harnesses the power of Precision AI](https://www.paloaltonetworks.com/cortex?ts=markdown) [Mitre Engenuity ATT\&CK Evaluations Dashboard Explore all of the results in our interactive tool](https://app.powerbi.com/view?r=eyJrIjoiNWRhYzY1YjItOTAxZC00MGM5LThlNzYtOTYxNzViYzM1ZGY2IiwidCI6IjgyOTNjZmRmLThjMjQtNDY1NS1hMzA3LWVhMjFjZDNiMjJmZiIsImMiOjF9) [2023 MITRE Engenuity ATT\&CK Evaluations The MITRE ATT\&CK Evaluations offer unbiased and invaluable insights into each participating vendor's performance.](https://start.paloaltonetworks.com/essential-guide-MITRE-R5) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=How%20Does%20EDR%20Leverage%20Machine%20Learning%3F&body=Discover%20how%20EDR%20and%20machine%20learning%20are%20revolutionizing%20cybersecurity%20by%20detecting%20and%20responding%20to%20threats%20with%20unparalleled%20accuracy%20and%20speed.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/how-edr-leverages-machine-learning) Back to Top [Previous](https://www.paloaltonetworks.com/cyberpedia/what-is-edr-vs-antivirus?ts=markdown) What is EDR vs. Antivirus? [Next](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-detection-and-response-edr-compliance?ts=markdown) What Is Endpoint Detection and Response (EDR) Compliance? {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center-subscribe.html) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language