Across the Logs and Into Cortex XSIAM
Learn how Cortex XSIAM streamlines SIEM migration with 1000+ connectors, 10,000+ detectors & native automation. Complete traditional SIEM upgrade in 3 months
Palo Alto Networks
XSIAM
Rapid Response to CVE-2025-31324: Mitigating SAP NetWeaver Visual Composer ...
Protect against SAP NetWeaver's critical CVE-2025-31324 vulnerability with Cortex XSIAM's automated detection and response playbook for identifying an...
What’s New for Cortex and Cortex Cloud (Apr ‘25)
Discover cutting-edge advancements in security ops with the latest Cortex releases. New features enhance threat prevention, platform coverage, automation, and attack surface tests for streamlined and robust sec...
Introducing XSIAM 3.0
XSIAM is expanding from reactive response to proactive defense, transforming exposure management and email security with unified data, AI and automation.
NL2XQL: Turning Natural Language into Powerful Cybersecurity Querying
NL2XQL transforms natural language into powerful XQL queries, making cybersecurity investigations accessible to all security teams without requiring d...
Creating an Automated Workflow for Account Lockout Resolution
This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.
Automating Response to Suspicious Process Executions
This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.
Automating Response to Suspicious SaaS Access From a Tor Exit Node
This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.
Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
SSO Password Spray Playbook
Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command
What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...
Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser,...
Automating Response to Multi-Factor Authentication Threats
SEO Meta description
Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts
Automating Response to Unauthorized Email Forwarding Activity in Google Wor...
Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM
Identify 60 Additional Server Protocols with Cortex Xpanse
Discover how Cortex Xpanse now identifies 60 additional server protocols in your attack surface, protecting against emerging threats across proxy, net...
Optimize Analyst Workflows with Cortex Copilot
Discover how Cortex Copilot streamlines security analyst workflows, reduces burnout, and accelerates incident investigations by leveraging AI to automate mundane tasks.
Cortex Copilot - Another Step Forward in SOC Transformation
Discover how Cortex Copilot, an AI-powered security assistant, transforms SOC operations by speeding up investigations and optimizing analyst workflow...
Expanded Coverage of Attack Surface Risks with Cortex Xpanse
Xpanse 2.7 introduces powerful new features to help security teams actively identify and remediate hidden risks across their ever-expanding attack sur...
What’s Next in Cortex: New Innovations for Security Operations
Cortex continues to transform the SOC with new innovations across the platform, including support for third-party EDR data to ease the transition from...
Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach
Cortex XDR & XSIAM offer comprehensive Kubernetes security with agent-based and agentless options, providing visibility, threat detection, and automat...
XSIAM 2.0: Continuing to Drive SOC Transformation
Cortex XSIAM 2.0 is the latest innovation for delivering a converged platform, AI-driven outcomes and an automation-first approach for the modern SOC.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.