Summary

  • The Palo Alto Cortex XDR is a threat-hunting platform ideal for businesses of all sizes and specialising in cybersecurity operations.
  • The platform provides a unified place for AI-driven incident detection and response, automated investigations, cloud-native architecture, and advanced analytics, aiming to streamline processes, reduce false positives, and enhance threat detection and response.
  • Benefits include the ability to consolidate security data from various sources and the convenience of a single platform for threat hunting, incident investigation, and incident response.
  • The incident investigation process involves accessing the Cortex XDR portal and viewing related alerts grouped together as incidents.
  • Alerts are highlighted in the portal, prioritised, and investigated based on their potential impact on organisational security.

By K O M A L

Original Article