Cortex XDR: Security Operations and Integration

SOC/CERT/CSIRT/XDR engineers and managers, MSSPs and service delivery partners/system integrators, security consultants and sales engineers.

This course is designed to enable you to:

• Describe the role of Cortex XDR components, including endpoint agents, XDR collectors, NGFWs, and Broker VMs, in securing networks and devices.
• Utilize XQL to query and analyze logs for effective data ingestion and threat detection.
• Design and implement workflows to streamline security operations.
• Apply External Dynamic Lists and indicator rules to enforce security policies

Attendees should possess a solid understanding of cybersecurity principles, including network and endpoint security concepts.