https://integrations.mimecast.com/de/tech-partners/palo-alto-networks-cortex-xsiam/
Palo Alto Networks Cortex XSIAM | Mimecast
palo alto networkscortex xsiammimecast
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Cortex-XSIAM-SIEM-migration-guide?contentId=O5OG5v~H0HxwuUgqCLmL~Q
Cortex XSIAM SIEM migration guide - Administrator Guide - Cortex XSIAM - Cortex - Security...
Security information and event management (SIEM) systems have become an integral part of an organization's security infrastructure. They provide a centralized...
cortex xsiamsiem migrationguideadministratorsecurity
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Integration-use-cases?contentId=ppoBbylrw9a7TCAAHYYkUg
Integration use cases - Common integration use cases for Cortex XSIAM, including analytics and...
Common integration use cases for Cortex XSIAM, including analytics and SIEM, authentication, case management, data enrichment, threat intelligence, forensic...
use casescortex xsiamintegrationcommonincluding
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Network-mapping?contentId=se4DoK6Q4sqm~Q9gpe~FqA
Network mapping - Administrator Guide - Cortex XSIAM - Cortex - Security Operations
ASM in XSIAM discovers and intelligently attributes assets to organizations, helping you discover and protect previously unknown internet-connected systems....
network mappingadministrator guidecortex xsiamsecurityoperations
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Step-1-Activate-Cortex-XSIAM
Step 1: Activate Cortex XSIAM - Learn how to activate your tenant. - Administrator Guide - Cortex...
Learn how to activate your tenant.
learn how tocortex xsiam
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Building-XQL-archived-data-queries?contentId=ZnQghek1AG2ZvqxnXL7JFw
Building XQL archived data queries - Administrator Guide - Cortex XSIAM - Cortex - Security...
Prerequisite Archived cold storage, in addition to a Period-Based Retention - Cold Storage add-on license, requires compute units (CU) to run archived cold...
archived dataadministrator guidecortex xsiambuildingqueries
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Filebeat?contentId=iylU1X5jtLtRoJXphMRitg
Filebeat - Administrator Guide - Cortex XSIAM - Cortex - Security Operations
Elasticsearch Filebeat, also called Filebeat, is a type of log source that can be ingested by Cortex XDR/Cortex XSIAM. Depending on the type of Elasticsearch...
administrator guidecortex xsiamfilebeatsecurityoperations
https://www2.paloaltonetworks.com/cortex/cortex-xsiam
Explore Cortex XSIAM Security Analytics - Palo Alto Networks
Automate and enhance security operations with Cortex XSIAM, using AI to centralize data, improve threat detection, and accelerate incident response across your...
cortex xsiamsecurity analyticspalo altoexplorenetworks
https://origin-www.paloaltonetworks.com/customers/louisiana-scales-security-using-ai-driven-cortex-xsiam
Louisiana scales security using AI-driven Cortex XSIAM - Palo Alto Networks
Learn how Louisiana leverages AI-powered Cortex XSIAM from Palo Alto Networks to improve threat visibility, automate response, and enhance security operations.
using aicortex xsiampalo altolouisianascales
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Extract-indicators?contentId=ynj2_MAybDB5sgGOiGWJKA
Extract indicators - Extract indicators from Cortex XSIAM alert fields and enrich them with...
Extract indicators from Cortex XSIAM alert fields and enrich them with commands and scripts defined for the indicator type.
cortex xsiamextractindicators
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Onboard-and-configure-Cortex-XSIAM/Log-notification-formats?contentId=9dWN5ifXedTKzvqdsIyjLw
Log notification formats - Cortex XSIAM provides you with different formats for its log...
Cortex XSIAM provides you with different formats for its log notifications.
cortex xsiamlognotificationformats
https://www.paloaltonetworks.com/resources/videos/get-the-full-picture-on-cortex-xsiam
Get the Full Picture | Cortex XSIAM - Palo Alto Networks
XSIAM pulls intelligent data and analytics from endpoints, network, cloud and identity systems into one consolidated platform.
get the full picturecortex xsiampalo altonetworks
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Specific-Cloud-Assets?contentId=zTFuy670z_IiR1eOpASGAQ
Specific Cloud Assets - Cortex XSIAM enables you to view specific cloud assets from a designated...
Cortex XSIAM enables you to view specific cloud assets from a designated cloud assets category in the Specific Cloud Asset pages.
cortex xsiam
https://www.paloaltonetworks.com/resources/datasheets/unit42-mdr-for-cortex-xsiam
MDR for Cortex XSIAM - Palo Alto Networks
Unit 42 experts leverage Cortex XSIAM to aggregate security telemetry from endpoints, network, cloud and identity sources and apply high-fidelity threat...
cortex xsiampalo altomdrnetworks
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Archived-data
Archived data - Learn more about archived data in Cortex XSIAM. - Administrator Guide - Cortex...
Learn more about archived data in Cortex XSIAM.
learn more aboutarchived datacortex xsiamadministratorguide
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Threat-Intel-Management-TIM?contentId=PSFfhoXF5Af5CW6f~38LIA
Threat Intel Management (TIM) - Administrator Guide - Cortex XSIAM - Cortex - Security Operations
Aggregates, scores, and distributes threat intelligence data to third-party tools and enriches alerts for context and attribution.
threat inteladministrator guidecortex xsiammanagementtim
https://www.paloaltonetworks.com/blog/tag/cortex-xsiam/
Cortex XSIAM Blogs | Palo Alto Networks
Read the latest blogs and insights about Cortex XSIAM from Palo Alto Networks experts.
cortex xsiampalo altoblogsnetworks
https://www.paloaltonetworks.com/blog/tag/cortex-xsiam-marketplace/
Cortex XSIAM Marketplace Blogs | Palo Alto Networks
Read the latest blogs and insights about Cortex XSIAM Marketplace from Palo Alto Networks experts.
cortex xsiampalo altomarketplaceblogsnetworks
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Confirm-the-remediation-of-ASM-alerts?contentId=81OGi7alhCfUKpjnhVU7RA
Confirm the remediation of ASM alerts - Administrator Guide - Cortex XSIAM - Cortex - Security...
Cortex XSIAM enables you to validate the resolution of an Attack Surface Management (ASM) alert using remediation confirmation scanning (RCS). This scan...
administrator guidecortex xsiamconfirmremediationasm
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Developer-Guide/Getting-Started?contentId=9PcTIo_ztspbuDrRGWF6Mg
Getting Started - Get started developing content for Cortex XSIAM. - Developer Guide - Cortex XSIAM...
Get started developing content for Cortex XSIAM.
getting startedcortex xsiamdevelopingcontentdeveloper
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/What-is-Causality?contentId=0EabG3Agkw65hwzrMHLCAw
What is Causality? - Learn more about Causality in Cortex XSIAM. - Administrator Guide - Cortex...
Learn more about Causality in Cortex XSIAM.
learn more aboutwhat iscortex xsiamcausality
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Playbooks?contentId=cGl4SJGnUBehoBqz9XBYDw
Playbooks - Administrator Guide - Cortex XSIAM - Cortex - Security Operations
Playbooks automate and standardize workflows, ensuring consistent and efficient incident response and management.
administrator guidecortex xsiamplaybookssecurityoperations
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Concepts?contentId=BINw43~E_uw_McrerM4gag
Concepts - Learn more about the Cortex XSIAM main concepts. - Administrator Guide - Cortex XSIAM -...
Learn more about the Cortex XSIAM main concepts.
learn more about thecortex xsiamconceptsmainadministrator
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Documentation
Cortex XSIAM 3.x Documentation - Administrator Guide - Cortex XSIAM - Cortex - Security Operations
cortex xsiamadministrator guidedocumentationsecurityoperations
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.8/Cortex-XDR-Agent-iOS-App/Administrator-Tasks?contentId=Sxm45m77EPkmVWm3YqKFSA
Administrator Tasks - The tasks in this section are performed by the Cortex XDR or Cortex XSIAM...
The tasks in this section are performed by the Cortex XDR or Cortex XSIAM administrator.
in this section
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Translate-to-XQL?contentId=oTogLy0JMIIv9dZkaqD0Vg
Translate to XQL - Learn how to translate your Splunk queries to XQL queries in Cortex XSIAM. -...
Learn how to translate your Splunk queries to XQL queries in Cortex XSIAM.
learn howtranslate
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Upgrade-your-tenant?contentId=G4sEu_BtwPi~OELZlsGr8g
Upgrade your tenant - If you have purchased new entitlements, Cortex XSIAM automatically upgrades...
If you have purchased new entitlements, Cortex XSIAM automatically upgrades your tenant to provide product upgrades and new license entitlements.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Threat-Intel-Management?contentId=RetzrkcTi3OWDwai9A3CfA
Threat Intel Management - Threat Intel Management Guide - Administrator Guide - Cortex XSIAM -...
Enhance your investigation with Threat Intel Management (TIM), which utilizes Unit 42 Intel.
threat intelmanagement guideadministratorcortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Ingest-logs-in-a-network-share-as-datasets?contentId=ecqfr~nDudl86WkvAKg4Iw
Ingest logs in a network share as datasets - Cortex XSIAM can receive logs from files and folders...
Cortex XSIAM can receive logs from files and folders in a network share directly to your log repository for query and visualization purposes.
https://www.paloaltonetworks.com/customers/oil-and-gas-company-deploys-ai-driven-soc-with-cortex-xsiam
Oil and gas company deploys AI-driven SOC with Cortex XSIAM - Palo Alto Networks
oil and gas
https://origin-www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions
How AI-Driven SOC Solutions Transform Cybersecurity: Cortex XSIAM - Palo Alto Networks
Simplify security operations with a converged platform, stop threats at scale with an AI-driven approach, and accelerate incident remediation with Cortex XSIAM.
ai drivensoc solutions
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Attack-surface-rules?contentId=ElFr0Z7fO~SsFCMTraLCBw
Attack surface rules - Learn more about Attack Surface Rules. - Administrator Guide - Cortex XSIAM...
Learn more about Attack Surface Rules.
learn more aboutattack surfaceadministrator guiderulescortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-Cloud-Posture-Management/Cortex-XSIAM-Migration-Process-for-New-Broker-VM-Image
Cortex XSIAM Migration Process for New Broker VM Image - Administrator Guide - Cortex Cloud Posture...
https://docs-cortex.paloaltonetworks.com/p/XSIAM
Cortex XSIAM
cortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Manage-your-Widget-Library?contentId=FENos4WebZ9lzh9VfbDAqw
Manage your Widget Library - Create, search, and view custom widgets in Cortex XSIAM, or use...
Create, search, and view custom widgets in Cortex XSIAM, or use predefined widgets.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Create-a-time-triggered-job?contentId=6XvpRyGdyDSNSKtdhnGO2w
Create a time triggered job - Create a time triggered or feed triggered job in Cortex XSIAM to run...
Create a time triggered or feed triggered job in Cortex XSIAM to run a playbook.
a time
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Investigation-Admin?contentId=7TY0_O3UaHMCFMkbbAWq8g
Investigation Admin - Learn more about the Cortex XSIAM predefined user role called Investigation...
Learn more about the Cortex XSIAM predefined user role called Investigation Admin.
learn more about the
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Initiate-a-Live-Terminal-session
Initiate a Live Terminal session - Initiate a Live Terminal session from the Cortex XSIAM...
Initiate a Live Terminal session from the Cortex XSIAM management console to control the endpoint remotely.
live terminalfrom theinitiatesessioncortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/What-is-a-list?contentId=PoVEGtjbclpjhy8BeGZfqA
What is a list? - Create and manage lists in Cortex XSIAM. - Administrator Guide - Cortex XSIAM -...
Create and manage lists in Cortex XSIAM.
create and manage
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Set-up-Broker-VM-on-Microsoft-Hyper-V?contentId=Gp2SDx7H2UhdU~zrje7mmw
Set up Broker VM on Microsoft Hyper-V - Learn how to set up your Cortex XSIAM Broker virtual...
Learn how to set up your Cortex XSIAM Broker virtual machine (VM) on Microsoft Hyper-V.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-2.x-Release-Notes/Known-Issues?contentId=r~HDaMWxnLSnOtCRmII8VQ
Known Issues - Cortex XSIAM
The Cortex XSIAM release includes the following known issues: Issue ID Description EXPANDR-10350 On threat details pages in the Threat Response Center,...
known issuescortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Manage-user-roles?contentId=omMQQMYMsyalja6iv0Ap0w
Manage user roles - Manage user roles that are assigned to Cortex XSIAM users or user groups in...
Manage user roles that are assigned to Cortex XSIAM users or user groups in Cortex XSIAM Access Management.
manage user roles
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Onboard-and-configure-Cortex-XSIAM/Configure-Cortex-XSIAM-network-parameters?contentId=YVR4RXhlOrrAUtV2Tja8sg
Configure Cortex XSIAM network parameters - Define the IP address ranges and domain names used by...
Define the IP address ranges and domain names used by Cortex XSIAM to identify your network assets.
https://origin-www.paloaltonetworks.com/company/press/2022/palo-alto-networks-introduces-the-autonomous-security-platform--cortex-xsiam--to-reimagine-siem-and-soc-analytics
Palo Alto Networks Introduces the Autonomous Security Platform, Cortex XSIAM, to reimagine SIEM and...
A major challenge in cybersecurity today is our inability to leverage massive scales of data for our defense. To meet this challenge, Palo Alto Networks...
palo alto networks
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Set-up-Broker-VM-on-Amazon-Web-Services?contentId=Poi7YxxiMtgh4U6eIcWtlQ
Set up Broker VM on Amazon Web Services - Learn how to set up your Cortex XSIAM Broker virtual...
Learn how to set up your Cortex XSIAM Broker virtual machine (VM) on AWS.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Developer-Guide/Lists
Lists - Create a list and add it to your content pack. - Developer Guide - Cortex XSIAM - Cortex -...
Create a list and add it to your content pack.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-3.x-Migration-Process-for-New-Broker-VM-Image
Cortex XSIAM 3.x Migration Process for New Broker VM Image - Administrator Guide - Cortex XSIAM -...
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Documentation/Identity-Threat-Detection-and-Response-ITDR?contentId=rQ_zgmZbMXEALPIx9p8BjQ
Identity Threat Detection and Response (ITDR) - Administrator Guide - Cortex XSIAM - Cortex -...
An add-on license available for purchase on top of either the Cortex XDR Pro licenses or both Cortex XSIAM Enterprise and Cortex XSIAM Enterprise Plus...
threat detection and responseadministrator guideidentityitdrcortex
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-SaaS-Documentation/Content-Pack-Support-Types?contentId=jTyBzCVbhLoZEZ_57cX5tQ
Content Pack Support Types - Types of content packs support - Cortex XSOAR/XSIAM supported,...
Types of content packs support - Cortex XSOAR/XSIAM supported, Partner-Supported, Developer-Supported, Community-Supported.
content packsupport typescortex xsoarpackssupported