{"id":112009,"date":"2020-05-27T22:56:14","date_gmt":"2020-05-28T05:56:14","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=112009"},"modified":"2020-05-27T23:19:22","modified_gmt":"2020-05-28T06:19:22","slug":"cortex-mth-launch","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2020\/05\/cortex-mth-launch\/?lang=zh-hant","title":{"rendered":"Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9\u73fe\u958b\u653e\u4e88\u6240\u6709\u7528\u6236\u4f7f\u7528"},"content":{"rendered":"<p style=\"font-weight: 400;\"><em>\u696d\u754c\u9996\u500b\u6a6b\u8de8\u6574\u5408\u7aef\u9ede\u3001\u7db2\u7d61\u548c\u96f2\u7aef\u6578\u64da\u904b\u884c\u7684\u5a01\u8105\u7375\u6355\u670d\u52d9<\/em><\/p>\n<p style=\"font-weight: 400;\">Palo Alto Networks<span lang=\"ZH-TW\">\u5ba3\u4f48\u5168\u9762\u63a8\u51fa<\/span><span lang=\"ZH-HK\">\u7531\u65d7\u4e0b<\/span><span lang=\"ZH-TW\">\u5a01\u8105\u60c5\u5831\u5718\u968a<\/span>Unit 42<span lang=\"ZH-HK\">\u63d0\u4f9b\u7684<\/span>Cortex XDR<span lang=\"ZH-TW\">\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\uff08<\/span>Managed Threat Hunting<span lang=\"ZH-TW\">\uff09\u529f\u80fd\uff0c\u63d0\u4f9b\u5168\u5929\u5019\u4e8c\u5341\u56db\u5c0f\u6642\u7684\u5a01\u8105\u7375\u6355\u670d\u52d9\u3002\u8a72<\/span><span lang=\"ZH-HK\"><wbr \/>\u670d\u52d9<\/span><span lang=\"ZH-TW\">\u65bc<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/02\/cortex-managed-threat-hunting\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.paloaltonetworks.com\/blog\/2020\/02\/cortex-managed-threat-hunting\/&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNGA-Uwx0zIwgtY0m1YB0DRpLFfkuw\"><span lang=\"ZH-TW\">\u4eca\u5e74\u5e74\u521d<\/span><\/a><span lang=\"ZH-TW\">\u4ee5\u9650\u6642<\/span><span lang=\"ZH-HK\">\u793e\u5340<\/span><span lang=\"ZH-TW\">\u8a2a\u554f\u7684\u6a21\u5f0f\u63a8\u51fa\uff0c\u900f\u904e<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/03\/cortex-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.paloaltonetworks.com\/blog\/2020\/03\/cortex-ai\/&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNGGdqMkGxH0VHwd8hIZIgpT1C3iCA\"><span lang=\"ZH-TW\">\u8fa8\u5225\u5be6\u969b\u653b\u64ca<\/span><\/a><span lang=\"ZH-TW\">\u53ca<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr\/mitre\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr\/mitre&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNFaBX_NMYQWJEdcTy_8d0veNBJIyA\"><span lang=\"ZH-TW\">\u5728<wbr \/>\u7b2c\u4e09\u65b9\u6e2c\u8a66<\/span><\/a><span lang=\"ZH-TW\">\u62ab\u9732\u653b\u64ca\u8005<\/span><span lang=\"ZH-HK\">\u6280\u5006<\/span><span lang=\"ZH-TW\">\uff0c\u70ba\u7528\u6236\u5e36\u4f86\u5de8\u5927\u50f9\u503c\u3002\u6700\u8fd1\u7684<\/span><a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/04\/cortex-mitre\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.paloaltonetworks.com\/blog\/2020\/04\/cortex-mitre\/&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNFyuPh4qYEwxth-JJV-jnR9fVsqyg\">MITR<wbr \/>E ATT&amp;CK<sup>\u00ae<\/sup>\u00a0APT29<\/a><span lang=\"ZH-TW\">\u8a55<\/span><span lang=\"ZH-HK\">\u6e2c<\/span><span lang=\"ZH-TW\">\u4e2d\uff0c<\/span>Cortex XDR<span lang=\"ZH-TW\">\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9<\/span><span lang=\"ZH-HK\">\u7372\u8b49\u5be6\u5b83\u6709\u6548<\/span><span lang=\"ZH-TW\">\u63d0\u5347\u6574\u9ad4\u653b\u64ca\u8986\u84cb\u7387\uff0c<wbr \/>\u80fd\u5920\u6aa2\u6e2c<\/span><span lang=\"ZH-HK\">\u9ad8\u9054<\/span>90%<span lang=\"ZH-TW\">\u7684\u653b\u64ca\u6280\u8853\uff0c<\/span><span lang=\"ZH-HK\">\u5728\u5e02\u5834\u7368\u4f54\u9c32\u982d<\/span><span lang=\"ZH-TW\">\u3002<\/span><\/p>\n<p><div style=\"max-width:100%\" data-width=\"602\"><span class=\"ar-custom\" style=\"padding-bottom:61.79%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"aligncenter size-full wp-image-112010 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/05\/image006.jpg\" alt=\"\" width=\"602\" height=\"372\" \/><\/span><\/div><\/p>\n<p style=\"font-weight: 400; text-align: center;\"><em>Unit 42<\/em><em>\u7814\u7a76\u4eba\u54e1\u63ed\u9732\u653b\u64ca<\/em><em>\u7684\u65b9\u5f0f<\/em><\/p>\n<p style=\"font-weight: 400;\">Unit 42\u7814\u7a76\u4eba\u54e1\u63ed\u9732\u5982Sofacy\u3001OilRig\u548cSilverTerrier\u7b49\u9032\u968e\u6301\u7e8c\u5a01\u8105\uff08APT\uff09\u7684\u5167\u90e8\u904b\u4f5c\u65b9\u9762\u6210\u6548\u8d85\u5353\uff0c\u8fd1\u671f\u4ea6\u767c\u73fe\u5927\u91cf\u8207\u65b0\u51a0\u75ab\u60c5\u76f8\u95dc\u7684\u5a01\u8105\u3002<\/p>\n<p style=\"font-weight: 400;\">Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u529f\u80fd\u7d50\u5408Unit 42\u5a01\u8105\u5075\u6e2c\u7684\u5c08\u696d\u77e5\u8b58\u53caCortex XDR\u5e73\u53f0\u539f\u751f\u7684\u7368\u7279\u6578\u64da\u95dc\u806f\u548c\u5075\u6e2c\u529f\u80fd\uff0c\u5354\u52a9\u7528\u6236\u7cbe\u6e96\u5730\u767c\u73fe\u96b1\u5f62\u653b\u64ca\u3002<\/p>\n<p style=\"font-weight: 400;\"><strong>Cortex XDR<\/strong><strong>\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355<\/strong><strong>\u670d\u52d9\u5305\u62ec<\/strong><strong>\uff1a<\/strong><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><strong>\u8ffd\u8e64\u8986\u84cb\u7aef\u9ede\u3001\u7db2<\/strong><strong>\u7d61<\/strong><strong>\u548c\u96f2\u7aef\u3002<\/strong>\u5c08\u5bb6\u5168\u5929\u5019\u4e8c\u5341\u56db\u5c0f\u6642\u63d0\u4f9b\u95dc\u9375\u5b89\u5168\u6578\u64da\u7684\u5c08\u696d\u5206\u6790\u3002<\/li>\n<li style=\"font-weight: 400;\"><strong>\u570b\u969b\u77e5\u540d\u7684\u5a01\u8105\u7375\u6355<\/strong><strong>\u5c08\u696d<\/strong><strong>\u4eba\u54e1\u3002<\/strong>Unit 42\u5a01\u8105\u7375\u6355\u4eba\u54e1\u5584\u7528\u65b0\u8208\u7684\u5a01\u8105\u7814\u7a76\uff0c\u914d\u5408Cortex XDR\u5e73\u53f0\u9032\u884c\u884c\u696d\u9818\u5148\u7684\u5206\u6790\u548c\u6578\u64da\u63a2\u7d22\uff0c\u4fdd\u6301\u512a\u52e2\u3002<\/li>\n<li style=\"font-weight: 400;\"><strong>\u53ef\u5be6\u884c\u7684\u5a01\u8105\u5831\u544a\u3002<\/strong>\u7528\u6236\u53ef\u900f\u904e\u5a01\u8105\u5831\u544a\u77ad\u89e3\u7db2\u7d61\u3001\u7aef\u9ede\u548c\u96f2\u7aef\u8cc7\u7522\u4e2d\u7684\u9ad8\u98a8\u96aa\u5a01\u8105\uff0c\u4ee5\u6c7a\u5b9a\u4e0b\u4e00\u6b65\u884c\u52d5\u3002<\/li>\n<li style=\"font-weight: 400;\"><strong>\u8cc7\u8a0a\u8c50\u5bcc\u7684\u5f71\u97ff\u5831\u544a\u3002<\/strong>\u5831\u544a\u4ff1\u524d\u77bb\u6027\uff0c\u6709\u52a9\u7528\u6236\u5728\u5f71\u97ff\u591a\u500b\u7d44\u7e54\u7684\u65b0\u8208\u5a01\u8105\u98a8\u96aa\u52a0\u5287\u524d\u5c07\u5176\u6d88\u9664\u3002<\/li>\n<\/ul>\n<p style=\"font-weight: 400;\"><a href=\"https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNF7xmwZIjALZ4RyCBraAG_UsGqukg\">Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355<\/a>\u670d\u52d9\u9810\u8a08\u65bc6\u6708\u521d\u5411\u6240\u6709\u5ba2\u6236\u63a8\u51fa\u3002<\/p>\n<p style=\"font-weight: 400;\"><strong>\u60f3\u77ad\u89e3\u66f4\u591a\u95dc\u65bc\u5a01\u8105\u7375\u6355\u7684\u8cc7\u8a0a\uff1f<\/strong><\/p>\n<p style=\"font-weight: 400;\">\u9996\u500b\u7db2\u4e0a\u300c<a href=\"https:\/\/start.paloaltonetworks.com\/inside-the-hunt-virtual-summit\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/start.paloaltonetworks.com\/inside-the-hunt-virtual-summit&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNGuFgOQ2RMG2y0-6ameaOQKOujKrA\">Inside the Hunt<\/a>\u300d\u5cf0\u6703\u5c07\u9080\u8acb\u884c\u696d\u5c08\u5bb6\u53ca\u5168\u7403\u77e5\u540d\u7684\u5a01\u8105\u7375\u6355\u4eba\u54e1\u5206\u4eab\u6709\u95dc\u5b89\u5168\u7b56\u7565\u7684\u6700\u4f73\u5be6\u8e10\u3002\u8207\u6703\u8005\u53ef\u76f4\u63a5\u807d\u53d6Unit 42\u7814\u7a76\u4eba\u54e1\u5206\u4eab\u5982\u4f55\u8fa8\u5225\u524d\u6240\u672a\u6709\u7684\u5a01\u8105\u3001\u9a57\u8b49\u653b\u64ca\u548c\u9006\u5411\u5de5\u7a0b\u60e1\u610f\u8edf\u4ef6\u4f86\u63d0\u4f9bCortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9\u3002<\/p>\n<p style=\"font-weight: 400;\">\u5982\u6b32\u5831\u540d\u53ca\u4e86\u89e3\u66f4\u591a\u8a73\u60c5\uff0c\u8acb\u700f\u89bd\u300c<a href=\"https:\/\/start.paloaltonetworks.com\/inside-the-hunt-virtual-summit\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/start.paloaltonetworks.com\/inside-the-hunt-virtual-summit&amp;source=gmail&amp;ust=1590731464266000&amp;usg=AFQjCNGuFgOQ2RMG2y0-6ameaOQKOujKrA\">Inside the Hunt<\/a>\u300d\u7db2\u9801\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u696d\u754c\u9996\u500b\u6a6b\u8de8\u6574\u5408\u7aef\u9ede\u3001\u7db2\u7d61\u548c\u96f2\u7aef\u6578\u64da\u904b\u884c\u7684\u5a01\u8105\u7375\u6355\u670d\u52d9 Palo Alto Networks\u5ba3\u4f48\u5168\u9762\u63a8\u51fa\u7531\u65d7\u4e0b\u5a01\u8105\u60c5\u5831\u5718\u968aUnit 42\u63d0\u4f9b\u7684Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\uff08Managed Threat Hunting\uff09\u529f\u80fd\uff0c\u63d0\u4f9b\u5168\u5929\u5019\u4e8c\u5341\u56db\u5c0f\u6642\u7684\u5a01\u8105\u7375\u6355\u670d\u52d9\u3002\u8a72\u670d\u52d9\u65bc\u4eca\u5e74\u5e74\u521d\u4ee5\u9650\u6642\u793e\u5340\u8a2a\u554f\u7684\u6a21\u5f0f\u63a8\u51fa\uff0c\u900f\u904e\u8fa8\u5225\u5be6\u969b\u653b\u64ca\u53ca\u5728\u7b2c\u4e09\u65b9\u6e2c\u8a66\u62ab\u9732\u653b\u64ca\u8005\u6280\u5006\uff0c\u70ba\u7528\u6236\u5e36\u4f86\u5de8\u5927\u50f9\u503c\u3002\u6700\u8fd1\u7684MITRE ATT&amp;CK\u00ae\u00a0APT29\u8a55\u6e2c\u4e2d\uff0cCortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9\u7372\u8b49\u5be6\u5b83\u6709\u6548\u63d0\u5347\u6574\u9ad4\u653b\u64ca\u8986\u84cb\u7387\uff0c\u80fd\u5920\u6aa2\u6e2c\u9ad8\u905490%\u7684\u653b\u64ca\u6280\u8853\uff0c\u5728\u5e02\u5834\u7368\u4f54\u9c32\u982d\u3002 Unit 42\u7814\u7a76\u4eba\u54e1\u63ed\u9732\u653b\u64ca\u7684\u65b9\u5f0f Unit 42\u7814\u7a76\u4eba\u54e1\u63ed\u9732\u5982Sofacy\u3001OilRig\u548cSilverTerrier\u7b49\u9032\u968e\u6301\u7e8c\u5a01\u8105\uff08APT\uff09\u7684\u5167\u90e8\u904b\u4f5c\u65b9\u9762\u6210\u6548\u8d85\u5353\uff0c\u8fd1\u671f\u4ea6\u767c\u73fe\u5927\u91cf\u8207\u65b0\u51a0\u75ab\u60c5\u76f8\u95dc\u7684\u5a01\u8105\u3002 Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u529f\u80fd\u7d50\u5408Unit 42\u5a01\u8105\u5075\u6e2c\u7684\u5c08\u696d\u77e5\u8b58\u53caCortex XDR\u5e73\u53f0\u539f\u751f\u7684\u7368\u7279\u6578\u64da\u95dc\u806f\u548c\u5075\u6e2c\u529f\u80fd\uff0c\u5354\u52a9\u7528\u6236\u7cbe\u6e96\u5730\u767c\u73fe\u96b1\u5f62\u653b\u64ca\u3002 Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9\u5305\u62ec\uff1a \u8ffd\u8e64\u8986\u84cb\u7aef\u9ede\u3001\u7db2\u7d61\u548c\u96f2\u7aef\u3002\u5c08\u5bb6\u5168\u5929\u5019\u4e8c\u5341\u56db\u5c0f\u6642\u63d0\u4f9b\u95dc\u9375\u5b89\u5168\u6578\u64da\u7684\u5c08\u696d\u5206\u6790\u3002 \u570b\u969b\u77e5\u540d\u7684\u5a01\u8105\u7375\u6355\u5c08\u696d\u4eba\u54e1\u3002Unit 42\u5a01\u8105\u7375\u6355\u4eba\u54e1\u5584\u7528\u65b0\u8208\u7684\u5a01\u8105\u7814\u7a76\uff0c\u914d\u5408Cortex XDR\u5e73\u53f0\u9032\u884c\u884c\u696d\u9818\u5148\u7684\u5206\u6790\u548c\u6578\u64da\u63a2\u7d22\uff0c\u4fdd\u6301\u512a\u52e2\u3002 \u53ef\u5be6\u884c\u7684\u5a01\u8105\u5831\u544a\u3002\u7528\u6236\u53ef\u900f\u904e\u5a01\u8105\u5831\u544a\u77ad\u89e3\u7db2\u7d61\u3001\u7aef\u9ede\u548c\u96f2\u7aef\u8cc7\u7522\u4e2d\u7684\u9ad8\u98a8\u96aa\u5a01\u8105\uff0c\u4ee5\u6c7a\u5b9a\u4e0b\u4e00\u6b65\u884c\u52d5\u3002 \u8cc7\u8a0a\u8c50\u5bcc\u7684\u5f71\u97ff\u5831\u544a\u3002\u5831\u544a\u4ff1\u524d\u77bb\u6027\uff0c\u6709\u52a9\u7528\u6236\u5728\u5f71\u97ff\u591a\u500b\u7d44\u7e54\u7684\u65b0\u8208\u5a01\u8105\u98a8\u96aa\u52a0\u5287\u524d\u5c07\u5176\u6d88\u9664\u3002 Cortex XDR\u8a17\u7ba1\u5f0f\u5a01\u8105\u7375\u6355\u670d\u52d9\u9810\u8a08\u65bc6\u6708\u521d\u5411\u6240\u6709\u5ba2\u6236\u63a8\u51fa\u3002 \u60f3\u77ad\u89e3\u66f4\u591a\u95dc\u65bc\u5a01\u8105\u7375\u6355\u7684\u8cc7\u8a0a\uff1f \u9996\u500b\u7db2\u4e0a\u300cInside the Hunt\u300d\u5cf0\u6703\u5c07\u9080\u8acb\u884c\u696d\u5c08\u5bb6\u53ca\u5168\u7403\u77e5\u540d\u7684\u5a01\u8105\u7375\u6355\u4eba\u54e1\u5206\u4eab\u6709\u95dc\u5b89\u5168\u7b56\u7565\u7684\u6700\u4f73\u5be6\u8e10\u3002\u8207\u6703\u8005\u53ef\u76f4\u63a5\u807d\u53d6Unit &hellip;<\/p>\n","protected":false},"author":563,"featured_media":111707,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3543],"tags":[],"coauthors":[6887],"class_list":["post-112009","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-3543"],"jetpack_featured_media_url":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/05\/Hunter.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/563"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=112009"}],"version-history":[{"count":2,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112009\/revisions"}],"predecessor-version":[{"id":112037,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112009\/revisions\/112037"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media\/111707"}],"wp:attachment":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=112009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=112009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=112009"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=112009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}