Vendors

This instructor-led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics. You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution.
img-course-overview.jpg

What You'll Learn

Successful completion of this instructor-led course with hands-on lab activities should enable participants to:
  • Investigate and manage incidents
  • Describe the Cortex XDR causality and analytics concepts
  • Analyze alerts using the Causality and Timeline Views
  • Work with Cortex XDR Pro actions such as remote script execution
  • Create and manage the Cortex XDR rules BIOC and IOC
  • Working with Cortex XDR assets and inventories
  • Write XQL queries to search datasets and visualize the result sets
  • Work with Cortex XDR’s external-data collection

Who Should Attend

Cybersecurity analysts and engineers, Security operations specialists.
img-who-should-learn.png

Prerequisites

Participants must have taken the course EDU-260 (Cortex XDR: Prevention and Deployment).

Learning Journey

Coming Soon...

  1. Cortex XDR Incidents
  2. Causality and Analytics Concepts
  3. Causality Analysis of Alerts
  4. Advanced Response Actions
  5. Building Search Queries
  6. Building XDR Rules
  7. Cortex XDR Assets 
  8. Introduction to XQL
  9. External Data Collection
The Cortex XDR: Investigation and Response (EDU-262) course is not linked to any Palo Alto Networks certification.

Frequently Asked Questions (FAQs)

  • Why get Palo Alto Networks certified?

    Palo Alto Networks certifications validate your expertise in cybersecurity and your ability to implement and manage their next-generation security platform.

    These certifications are highly sought after by employers, as they demonstrate your knowledge of cutting-edge security technologies and your ability to protect organizations from cyberthreats.

    Palo Alto Networks-certified professionals are in demand for their ability to design, deploy, and maintain secure network infrastructures.

  • What to expect for the examination?

    Palo Alto Networks offers a variety of certification exams at different levels (PCCSA, PCNSA, PCNSE, PCDRA, etc.) covering various aspects of their security platform.

    Exams typically consist of multiple-choice questions, scenario-based questions, and interactive simulations that test your ability to apply your knowledge in real-world scenarios.

    Note: Certification requirements and policies may be updated by Palo Alto from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • How long is Palo Alto Networks certification valid for?

    Palo Alto Networks certifications are typically valid for two years from the date you pass the exam.

    To maintain your certification, you will need to recertify by retaking the exam prior to your expiration date.

    Note: Certification requirements and policies may be updated by Palo Alto from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • Why take this course with Trainocate?

    Here’s what sets us apart:

    - Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 16 countries (and counting!).

    - Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.

    - Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.

    - Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.

    - Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.

    - Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Course Curriculum

Training Schedule

Training Schedule

Exam & Certification

Exam & Certification

FAQs

Frequently Asked Questions

img-improve-career.jpg

Improve yourself and your career by taking this course.

More Courses By Palo Alto Networks

img-get-info.jpg

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name
Email
Phone
I'm inquiring for

Inquiry Details

By providing your contact details, you agree to our Privacy Policy.