Palo Alto Networks: Cortex XSOAR: Engineering Security Automation Solutions

Through a blend of lectures and hands-on labs, this four-day, instructor-led course will provide students with the knowledge and skills needed to integrate their existing security tools with Cortex XSOAR.

Course Modules

1. Course Introduction
2. XSOAR Overview
3. Incident Management
4. Threat Intelligence
5. Analyst Investigations
6. Dashboards, Reports, and Timers
7. Integrations and Content Management
8. Architecture
9. Use Case Planning and Implementation
10. Playbook Development
11. Automation Scripts

Participants should have a basic understanding of:

• Networking concepts, such as identifying private IPs and domains
• Cybersecurity concepts, such as Indicators of Compromise
• Navigating Windows and Linux environments using the GUI and CLI

• SOC / SIEM / Automation Engineers
• MSSPs and Service Delivery Partners working with XSOAR