• Blog
  • Security Operations

Security Operations

Security Operations

Must-Read Articles
Product Features
Use-Cases
News and Events
Partner Integrations
Playbook of the Week
Product Features, Uncategorized, Use-Cases
SmartGrouping - Precision AI™-Driven Investigation
SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a...
May 23, 2024
By  and
Must-Read Articles, Product Features
Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach
Kubernetes has revolutionized the way we deploy and manage applications, but its complexity and dynamic nature also introduce a new set of security ch...
May 14, 2024
By 
Playbook of the Week, Uncategorized
Playbook of the Week: Automating Response to Living-Off-the-Land (LOTL) Att...
Organizations face increasingly sophisticated cyberattacks in today's rapidly evolving threat landscape. Attackers leverage common tools and living-Of...
May 09, 2024
By 
Announcement, Must-Read Articles, Product Features
Cortex Copilot - In SecOps, You Should Secure Smarter, Not Harder
There are a lot of moving parts in security operations. As cyberthreats continue advancing in speed and complexity, analysts must investigate and reme...
May 07, 2024
By  and
Must-Read Articles, Products and Services
AI's Offensive & Defensive Impacts
As the hype around AI continues to ramp up, cybersecurity practitioners are trying to separate reality from fiction when it comes to how artificial intelligence will impact their field. Our discussion includes...
May 01, 2024
By 
Must-Read Articles, Use-Cases
Leading with a Prevention-First Approach for Cloud Detection and Response
As cloud computing continues to evolve and becomes the ad-hoc standard for many of the world’s largest enterprises, we also see attack surfaces growing and the escalation of cybert...
Apr 17, 2024
By 
Announcement, Must-Read Articles, News and Events
Confirm Attack Surface Vulnerabilities with Cortex Xpanse Attack Surface Te...
As organizations’ attack surfaces continue to grow, we’ve seen that traditional vulnerability testing is insufficient to secure an organization’s exte...
Apr 15, 2024
By 
Announcement, Must-Read Articles, News and Events, Product Features
XSOAR 8 On-Premises Now Available!
We are pleased to announce the support for on-premises deployments for XSOAR 8. New customers of Cortex XSOAR 8 who require an on-premises deployment for policy or regulatory reasons can now take advantage of t...
Apr 15, 2024
By 
Announcement, News and Events, Product Features
What’s Next in Cortex — XSIAM for Cloud and Other Innovations
Security operations teams are tasked with solving a variety of different challenges. They face the complexities of protecting growing and dynamic clou...
Apr 15, 2024
By 
Playbook of the Week
Playbook of the Week: Prisma Cloud Compute - Compliance Alert v2
Maintaining compliance with regulations and security standards is paramount for organizations in today's dynamic and ever-evolving cybersecurity landscape. However, simply receivin...
Apr 11, 2024
By 
Playbook of the Week
Playbook of the Week: Streamlining Suspicious Data Upload Alert Investigati...
Data exfiltration refers to the unauthorized transfer of sensitive or confidential information from a network or system to an external location. This covert activity often occurs s...
Apr 05, 2024
By 
Must-Read Articles, Product Features, Products and Services
The Power of AI Assistants and Advanced Threat Detection
One short-term prediction from Spisak is the emergence of AI-powered cybersecurity “assistants,” which he envisions will serve as co-pilots to defenders, boosting their efficiency in responding to threats.
Apr 04, 2024
By 
Must-Read Articles, Product Features, Products and Services
Short, Mid and Long-Term Impacts of AI in Cybersecurity
“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42, with roles in AI research, product management, consulting, engineering and more....
Feb 01, 2024
By 
Must-Read Articles, Products and Services
Who’s the Boss? Teaming Up With AI in Security
“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42, with roles in AI research, product management, consulting, engineering and more....
Feb 14, 2024
By 
Must-Read Articles, Products and Services
Harnessing the Power of AI in Cybersecurity — Predictions and Solutions
“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42 with roles in AI resea...
Feb 07, 2024
By 
Must-Read Articles, Product Features, Products and Services
AI, Cybersecurity and the Rise of Large Language Models
Artificial intelligence (AI) plays a crucial role in both defending against and perpetrating cyberattacks, influencing the effectiveness of security measures and the evolving nature of threats in the digital la...
Apr 02, 2024
By 
Playbook of the Week, Uncategorized
Playbook of the Week: Automating Management of XDR Identity Analytics Alert...
Identity analytics is a critical cybersecurity tool in combating the challenges posed by compromised user accounts and malicious insiders. Identity th...
Mar 07, 2024
By 
Must-Read Articles, Non classifié(e), Product Features
A Deep Dive Into Malicious Direct Syscall Detection
In this blog post we will explain how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls. Then...
Feb 13, 2024
By  and
Announcement, Must-Read Articles, Product Features, Products and Services
XSIAM 2.0: Continuing to Drive SOC Transformation
Security teams have an important and difficult job – protecting their organizations from a threat landscape that is constantly changing. Based on investigations conducted by our Un...
Nov 13, 2023
By 
Playbook of the Week, Uncategorized
Playbook of the Week: Using YARA to Automate Malware Identification and Cla...
In the dynamic realm of cybersecurity, maintaining a proactive defense against evolving threats is non-negotiable. One potent weapon that has emerged...
Feb 01, 2024
By 

Subscribe to Security Operations Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts

Popular Resources

Legal Notices

Popular Links