Workforce Development / PAN EDU-270: Cortex XSIAM: Security Operations and Automation
PAN EDU-270: Cortex XSIAM: Security Operations and Automation
This four-day instructor-led training enables you to deploy and manage Cortex XSIAM, Palo Alto Networks' AI-driven security operations platform.
Length: Four days
Price: $5,000 CAD
Who Should Attend:
- Cybersecurity analysts and engineers
- Security-operations (SecOps)
- CERT/CSIRT/XSIAM engineers
- SOAR engineers
- Managed security service providers (MSSPs)
- Service delivery partners
- System integrators
- Professional services engineers
Describe the architecture and components of the Cortex XSIAM
Describe how Cortex XSIAM consumes and ingests data from various sources
Deploy Cortex XDR agent installation packages and its essential configurations
Understand how to use Cortex XSIAM to analyze an environment from the outside, which enhances the existing internal access to the environment provided with an installed agent
Understand the onboarding process within Cortex XSIAM
Customize dashboards tailored to the unique needs of security operations centres (SOCs)
Grasp the essentials of security analytics and correlations, discerning their role in effective threat detection and explore the critical role of automation in cybersecurity, understanding its impact and reaping the benefits
Delve into the critical realm of data models, gaining essential knowledge on their core components and the intricate process of mapping events onto them
Understand cybersecurity incident handling, covering categorization, investigation techniques and best practices
Description
Cortex Extended Security Intelligence and Automation Management (XSIAM) is Palo Alto Networks’ AI-driven security operations platform for the modern SOC. This four-day instructor-led training enables you deploy and manage Cortex XSIAM to collect and ingest various data sources, logs and alerts, to drive machine learning for natively autonomous response actions, such as cross-correlation of alerts and data, detection of highly sophisticated threats and automated remediation based on native threat intelligence and attack surface data.
Topics Covered:
- Intro to XSIAM
- Elements of security operations
- Maturity model
- Agent deployment and configuration
- Alerting and detection
- Data source ingestion
- Visibility Analytics
- Attack surface management
- Automation
- Data model
- Incident handling/SOC
Prerequisites:
- Familiarity and experience in the SOC environment with enterprise product deployment, networking and security concepts
- Completion of Cortex XSIAM Foundational Concepts is highly recommended
Related Courses:
