Palo Alto – PAN XSIAM IA: Cortex XSIAM: Investigation and Analysis

This course is designed to enable you to:

• Investigate incidents, analyze key assets and artifacts, and interpret the causality chain.
• Query and analyze logs using XQL to extract meaningful insights.
• Utilize advanced tools and resources for comprehensive incident analysis.

SOC/CERT/CSIRT/XSIAM analysts and managers, MSSPs and service delivery partners/system integrators, internal and external professional-services consultants and sales engineers, incident responders and threat hunters.

Module 1: Introduction to Cortex XSIAM
Module 2: Endpoints
Module 3: XQL
Module 4: Alerting and Detection
Module 5: Threat Intel Management
Module 6: Automation
Module 7: Attack Surface Management
Module 8: Incident Handling
Module 9: Dashboard and Reports

Participants should have a foundational understanding of cybersecurity principles and experience with analyzing incidents and using security tools for investigation.