Targeted threats at your fingertips

AutoFocus™ threat intelligence service accelerates analysis, hunting and response workflows. Unique, targeted attacks are automatically prioritized with full context, enabling security teams to respond to critical attacks faster, without additional IT security resources.

Threat context you have never seen before

Gain visibility into the most critical threats with contextual intelligence on malware families, campaigns, threat actors, malicious behaviors, and exploits used. AutoFocus enables you to answer questions like, “Who is attacking me?” “What tools are they using?” and “How targeted or unique is this threat?” 

Extend the platform with threat intelligence

AutoFocus helps all members of the IT security team become advanced threat hunters, instead of relying on a small group of highly specialized security operations professionals. Threat intelligence from the service is made directly accessible in the Palo Alto Networks platform, including PAN-OS® and Panorama™, without requiring a separate tool.

Cyber attackers have become highly automated, delivering increasingly sophisticated attacks in higher volume than ever before. It is not possible for over-burdened security teams to follow up on every threat, leaving little time to investigate the truly advanced attacks.

As organizations move to a prevention-led approach with the Palo Alto Networks® Next-Generation Security Platform, security teams can devote their limited time hunting for the small number of truly advanced, targeted attacks using AutoFocus. 

Our Most Intelligent Service Yet

AutoFocus enables you to distinguish the most important threats from everyday commodity attacks by matching events on your network to tags. Now, instead of simply seeing that a malicious event has occurred, you immediately know the context around an attack, such as the malware family, campaign, or malicious actor targeting your organization. When identified, AutoFocus will alert your security team about high-priority events, enabling you to take swift action to mitigate their impact. 

Visibility into the Unknown

AutoFocus provides unprecedented visibility into unknown threats, with the collective insight of thousands of global enterprises, service providers, and governments feeding the service. AutoFocus correlates and gains intelligence from:

  • WildFire, the industry’s largest network sandbox service
  • PAN-DB URL Filtering service
  • Palo Alto Networks global passive DNS network
  • Unit 42 threat intelligence and research team
  • Unique artifact-level statistical analysis in AutoFocus
  • Third-party feeds, including closed and open source intelligence.

Accelerated Analysis and Hunting Workflows

Legacy approaches to securing the organization rely on aggregating an increasing number of detection-focused alerts with complex analysis workflows after the event.

AutoFocus puts the entire wealth of Palo Alto Networks threat intelligence at your fingertips, dramatically cutting the time it takes to conduct analysis, forensics or hunting efforts. Threat intelligence and context are available directly in PAN-OS, Panorama, or the AutoFocus portal for in-depth searching across indicators of compromise (IOCs).


 

CBI Health Group

CBI Health chose the Palo Alto Networks Next-Generation Security Platform to protect its data center from ransomware and other threats.

  • 1
  • 265

AutoFocus At A Glance

The AutoFocus threat intelligence service allows security teams to prioritize their response to unique, targeted attacks. Gain the intelligence, analytics, and context needed to protect your organization. View the At-a-Glance for a high-level view into the AutoFocus service and key use-cases.

Palo Alto Networks,
  • 2
  • 1797

AutoFocus Data Sheet

Overview of the AutoFocus threat intelligence service.

Palo Alto Networks,
  • 1
  • 3952

Palo Alto Networks AutoFocus Threat Intelligence Service Now Globally Available

Palo Alto Networks® (NYSE: PANW), the next-generation security company, today announced general availability of AutoFocus™, a new threat intelligence cloud service that provides prioritized, actionable cyberthreat intelligence and gives organizations a clear advantage in the battle against cyberthreats.

Santa Clara, CA
  • 3
  • 1385

AutoFocus Quick Demo

Watch a short overview video how of the AutoFocus threat intelligence service helps security teams identify and prevent targeted attacks. We will explain the key concepts of AutoFocus and benefits the service provides.

  • 1
  • 1831

AutoFocus Actionable Threat Intelligence

View the key benefits of the AutoFocus threat intelligence service with an in-depth UI demo. You will gain an understanding of how security operations, analysis, and research teams can use the service to prioritize unique, targeted attacks.

  • 2
  • 791