Automating Response to Credential Dumping Attacks
Automated playbook designed to detect, contain and remediate credential dumping activity.
Security Operations
Security Operations
Must-Read Articles
Product Features
Use-Cases
News and Events
Partner Integrations
Playbook of the Week
MITRE ATT&CK Evaluations — Cortex XDR Among Elite in Endpoint Security
Palo Alto Networks achieves top MITRE ATT&CK 2024 results with 100% detection rates against evolving AI-powered cyber threats.
Cortex Xpanse Protects Against Malicious Domain Takeover Techniques
Malicious domain takeovers have become an increasing concern for businesses as attackers exploit vulnerabilities by gaining unauthorized access to a d...
Automating Response to Unauthorized User Account Creation
This playbook automates incident response actions to identify, investigate, and remediate unauthorized hidden user account creation.
Democratize Threat Hunting with Cortex Copilot
Discover how Cortex Copilot democratizes threat hunting by enabling analysts to investigate security incidents with AI-powered guidance. Learn how a new threat hunter uncovered a privileged account breach.
More Blogs
Displaying 1—16 of
476 results
Sort By:
SSO Password Spray Playbook
Learn how to detect and prevent SSO password spray attacks with our comprehensive security playbook. Automate response and strengthen authentication security.
Announcement, Application Security, Cloud Security, CNAPP, News and Events, Product Features, Products and Services
Introducing Cortex Cloud — The Future of Real-Time Cloud Security
Cortex Cloud brings the world’s leading CNAPP onto the #1 SecOps platform, delivering real-time protection — for the fir...
Demystifying Impossible Traveler Detection
Discover how Impossible Traveler Detection in Cortex XDR identifies suspicious logins from distant locations in a short time, and how to address challenges like VPN impacts and reduce false positives in complex...
Deloitte’s Cloud Migration Success: Transforming SecOps with Cortex XSOAR
For years, Deloitte's Cybersecurity Center had leveraged Cortex XSOAR on-premises to drive automation across its portfolio. Building on this success,...
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command
New Cortex Detectors for macOS Address Stealers and Malicious AppleScript
Cortex releases new detection analytics targeting macOS stealers and malicious applescript
What’s New in Cortex: The Latest Innovations for the World’s #1 SecOps Plat...
Cortex SOC platform introduces new enhancements and features across the entire portfolio including a brand new integration with Prisma Access Browser,...
Detecting Threats with Microsoft Graph Activity Logs
Discover how Microsoft Graph API is used as an attack vector by threat actors through a real-world attack scenario. Find out why monitoring Microsoft Graph activity logs is important and how Cortex delivers tai...
DeepSeek’s Rise Shows AI Security Remains a Moving Target
DeepSeek is an LLM threatening to disrupt current AI market leaders and fundamentally change the economics of AI-powered applications.
Automating Response to Multi-Factor Authentication Threats
SEO Meta description
Cortex XSIAM automated playbook addressing user rejected numerous SSO MFA attempts
Cortex Is the First SOC Platform to Achieve FedRAMP High Authorization
Cortex achieves FedRAMP High Authorization, becoming the first AI-driven SOC platform to meet the highest government security standards.
Automating Response to Unauthorized Email Forwarding Activity in Google Wor...
Automating response to “A mail forwarding rule was configured in Google Workspace” with Cortex XSIAM
Automate Response to Event Log Clearing Alerts with Cortex XSIAM
Automating response to potentially malicious event logs clearing activity with Cortex XSIAM
Handling Successful SSO Sign-ins from Tor
Automating response to successful Tor SSO sign-ins with Cortex XSIAM
Cortex XDR Delivers Unmatched 100% Detection in MITRE Evals 2024
Cortex XDR achieves 100% technique-level detection in the 2024 MITRE ATT&CK evaluation.
MITRE ATT&CK 2024: Raising the Bar for Security Testing
MITRE's 2024 ATT&CK evaluations have evolved, testing vendors against Ransomware as a Service and DPRK threats, introducing false positive detection.
More Blogs
Displaying 1—16 of
439 results
Sort By:
New Cloud Location Innovates and Strengthens Presence in Indonesia
Find out how Palo Alto Networks’ secure cloud infrastructure is aiding the growth of businesses in Indonesia, enabling them to leverage advanced cloud...
AI, Cybersecurity and the Rise of Large Language Models
Discover how AI impacts threat detection, incident response and risk management, and learn about strategies for secure AI integration.
Forrester Names Palo Alto Networks a Leader in XDR
Palo Alto Networks was named a leader in extended detection and response platforms by Forrester for Cortex XDR.
Palo Alto Networks Excels in MITRE Managed Services Evaluation
Unit 42 MDR identified the most important details of the cyberthreat in the MITRE managed services evaluation - learn more.
Palo Alto Networks Recognized as a Leader in the 2023 Gartner Magic Quadran...
Palo Alto Networks was named a leader in endpoint protection platforms by Gartner for Cortex XDR.
AI Provides an Rx for Cybersecurity in Healthcare
Tapan Mehta discusses the challenges, opportunities and future of AI in protecting healthcare infrastructure and data.
Advancing Innovation and Harnessing AI to Secure the Homeland
Before the House Committee on Homeland Security, Unit 42 shares the Palo Alto Networks perspective on the intersection of AI and cybersecurity.
ONLY Cortex Delivers 100% Protection and Detection in MITRE Engenuity
MITRE Engenuity ATT&CK Evaluations have been released. This year, Cortex is the only vendor with 100% prevention and analytic detection.
The Dark Side of AI in Cybersecurity — AI-Generated Malware
Bar Matalon and Rem Dudas shed light on their groundbreaking research into AI-generated malware and predictions for the future of AI in cybersecurity....
Introducing the New Cortex Shellcode AI Protection: A Precision AI-Driven M...
Discover Palo Alto Networks' new Cortex Shellcode AI Protection Module. Learn how Precision AI™ detects and prevents elusive shellcode attacks in real...
Company & Culture, Customer Spotlight, Must-Read Articles, Product Features, Products and Services, Use-Cases
AI Powers Sabre's Enhanced Threat Detection & Response
Precision AI by Palo Alto Networks helps security teams trust AI outcomes using security-specific models to automate det...
Creating a Security Program with Less Complexity and More Visibility
Our 2024 Incident Response Report shows how vulnerabilities go unpatched, and critical resources sit exposed.
Playbook of the Week: Automating Management of XDR Identity Analytics Alert...
Playbook that automates management of XDR identity analytics alerts for speedier response to identity threats.
What’s Next in Cortex - New Wave of Innovations in Cortex (June 2024 Releas...
Discover the latest innovations in Cortex products: XSIAM 2.3, XDR 3.11, Xpanse 2.6, and XSOAR 8.7. Enhance SecOps efficiency and threat prevention
A Deep Dive Into Malicious Direct Syscall Detection
This blog explains how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls.
AI in Cyber Is Here to Stay — How to Weather This Sea Change
AI is transforming cybersecurity, automating tasks and enabling better custom threat detection. AI impacts jobs and cloud services.
Subscribe to Security Operations Blogs!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.