Palo Alto Networks Cortex XDR: Security Operations and Integration

About this course

Deploy and run Cortex XDR across your endpoints. Over three days you will learn the architecture and components of the Cortex XDR family, work in the management console and its reports, create agent installation packages, endpoint groups and policies, roll out agents, configure Exploit and Malware Prevention profiles, and triage alerts using starring and exclusion policies.

What you'll learn

• Describe the architecture and components of the Cortex XDR family
• Use the Cortex XDR management console, including reporting
• Create Cortex XDR agent installation packages, endpoint groups, and policies
• Deploy Cortex XDR agents on endpoints
• Create and manage Exploit and Malware Prevention profiles
• Investigate alerts and prioritize them using starring and exclusion policies
• Tune Security profiles using Cortex XDR exceptions
• Perform and track response actions in the Action Center
• Perform basic troubleshooting related to Cortex XDR agents
• Deploy a Broker VM and activate the Local Agents Settings applet
• Understand Cortex XDR deployment concepts and activation requirements
• Work with the Customer Support Portal and Cortex XDR Gateway for authentication and authorization

Curriculum

Who it's for

Security engineers and administrators familiar with enterprise deployment, networking and security concepts.

Before you start

• Participants must be familiar with enterprise product deployment, networking, and security concepts