Palo Alto Networks: Cortex XDR: Security Operations and Integration

Designed to enable cybersecurity professionals, particularly those in SOC/CERT/CSIRT and engineering roles, to use Cortex XDR

This 3-day instructor-led course provides in-depth training on Cortex XDR, Palo Alto Networks' powerful extended detection and response platform. You will gain hands-on expertise in security operations, incident investigation, and system optimization to effectively protect modern environments.

The course reviews XDR intricacies, from fundamental components to advanced strategies and techniques, including skills needed to configure security integrations, develop workflows, manage indicators, and optimize dashboards for enhanced security operations.

GK# 842009

Vendor Credits:

Group Training

Group Training

Live expert-led training for your team or entire organization that can be customized to fit your exact needs.

No matching courses available.

Start learning as soon as today! Click Add To Cart to continue shopping or Buy Now to check out immediately.

Access Period:

Scheduling a custom training event for your team is fast and easy! Click here to get started.

Who Should Attend?

SOC/CERT/CSIRT/XDR engineers and managers
MSSPs and service delivery partners/system integrators
Security consultants and sales engineers.

What You'll Learn

Describe the role of Cortex XDR components, including endpoint agents, XDR collectors, NGFWs, and Broker VMs, in securing networks and devices.
Utilize XQL to query and analyze logs for effective data ingestion and threat detection.
Design and implement workflows to streamline security operations.
Apply External Dynamic Lists and indicator rules to enforce security policies.

Prerequisites

Attendees should possess a solid understanding of cybersecurity principles, including network and endpoint security concepts.

Related Certifications

Palo Alto Networks Certified XDR Engineer

Download course details