The Frontier AI SOC Has Arrived
Cortex brings the latest frontier AI models into the SOC, letting analysts dynamically select the best model for each task while benefiting from state-of-the-art advances in AI.
Palo Alto Networks
Security Automation
Unveiling Autonomous Playbooks: Immediate Threat Response in XSIAM
Discover how Cortex XSIAM autonomous playbooks revolutionize incident response by automating workflows and reducing manual toil for faster, more effic...
Don’t Get Reeled In: The Case for AI-Driven Phishing Response
Stop drowning in phishing alerts. See how the Cortex Email Investigation agent uses AI to cluster campaigns, reason through alerts, and scale your SOC...
Always on the Case: Introducing the AgentiX Case Investigation Agent
Accelerate your security operations with the Cortex AgentiX Case Investigation Agent. This agentic AI teammate provides expert triage and investigatio...
A Day in the Life with Your AgentiX Automation Engineer Agent
Stop coding, start conversing. Introducing the Automation Engineer Agent, your new AI partner for instant script generat...
Cortex AgentiX: A Behind-the-Scenes Perspective
A behind-the-scenes look at how we build and manage agentic AI agents with Cortex AgentiX.
Introducing the Cortex MCP Server
This blog introduces the new Cortex MCP, bringing real-time intelligence from XSIAM data to your preferred LLM application.
Discover the Power of Next-Gen Automation in XSIAM 3.x
Discover how XSIAM 3.x on Cortex platform simplifies security automation with intuitive playbook building, 1,000+ integrations, and streamlined workflows.
Stopping Cross-Domain Attacks with Cortex XDL + Cortex XSIAM
Siloed security tools miss 75% of threats. See how Cortex XDL's unified data foundation enables AI-powered detection against identity-driven attacks.
Playbook Creation Reimagined: The Intuitive Approach to Security Automation
Continuing to innovate on our market-leading SOAR to simplify security operations, ensure ease of use in the adoption of automation.
Creating an Automated Workflow for Account Lockout Resolution
This playbook automates and speeds up response to excessive user account lockouts, which could indicate a credential-based attack.
Automating Response to Unauthorized Scheduled Task Executions
Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security...
Automating Response to Unauthorized Tor Logins
The A Successful Login from Tor playbook in Cortex XSIAM enhances security teams’ ability to detect and respond to unauthorized access attempts using Tor. By automating identity verification, automated remediat...
Automating Response to Suspicious Process Executions
This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.
Automated Rapid Response to Suspicious Remote Scheduled Task Creation
This playbook automates the identification and remediation of persistent threats that leverage scheduled tasks to execute malicious payloads across endpoints.
Automating Response to Suspicious SaaS Access From a Tor Exit Node
This playbook shows how a SecOps team can use Cortex XSIAM to automate and speed response to suspicious SaaS access alerts involving a Tor exit node.
Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
Automating Response to Unauthorized User Account Creation
This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command
Automating Response to Multi-Factor Authentication Threats
SEO Meta description
Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts
Automate Response to Event Log Clearing Alerts with Cortex XSIAM
Automating response to potentially malicious event logs clearing activity with Cortex XSIAM
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.
This site is protected by reCAPTCHA and the Google
Privacy Policy and
Terms of Service apply.