Get to know

Omri Itzhak

Security Architect

Blogs by Omri Itzhak

Sort By:

Automating Response to Unauthorized Scheduled Task Executions

Playbook of the Week, Uncategorized

Automating Response to Unauthorized Scheduled Task Executions

Discover how Cortex XSIAM automates detection and response to malicious scheduled tasks that reference external HTTP/FTP sources for improved security posture.

Apr 03, 2025

Automating Response to Suspicious Process Executions

Playbook of the Week, Unkategorisiert

Automating Response to Suspicious Process Executions

This playbook automates the investigation and response to suspicious process executions triggered by a scheduled task.

Mar 20, 2025

Automated Rapid Response to Suspicious Remote Scheduled Task Creation

Playbook of the Week

Automated Rapid Response to Suspicious Remote Scheduled Task Creation

This playbook automates the identification and remediation of persistent threats that leverage scheduled tasks to execute malicious payloads across endpoints.

Mar 13, 2025

Playbook of the Week, Uncategorized

Automating Response to Credential Dumping Attacks

Automated playbook designed to detect, contain and remediate credential dumping activity.

Feb 27, 2025

Automating Response to Unauthorized User Privilege Escalations Using PowerShell Commands

Playbook of the Week

Automating Response to Unauthorized User Privilege Escalations Using PowerS...

Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command

Feb 05, 2025

Blogs by Omri Itzhak

Sort By:

Playbook of the Week: Automating Management of XDR Identity Analytics Alerts

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Management of XDR Identity Analytics Alert...

Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.

Mar 07, 2024

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

Playbook of the Week

Playbook of the Week: Suspicious SSO? Check It Out with XSOAR

Automate SSO access alerts handling and response

May 25, 2023

Playbook of the Week: Streamlining the management of XDR Incidents

Announcement, Playbook of the Week

Playbook of the Week: Streamlining the management of XDR Incidents

The Cortex XSOAR XDR Lite playbook streamlines the handling of XDR alerts, by automating the repetitive tasks associated with incident response.

Nov 09, 2023

Get the latest news, invites to events, and threat alerts