This instructor-led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics.

You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution.

Multiple modules focus on how to leverage the collected data. You will create simple search queries in one module and XDR rules in another. The course demonstrate how to use specialized investigation views to visualize artifact-related data, such as IP and Hash Views. Additionally, it provides an introduction to XDR Query Language (XQL). The course concludes with Cortex XDR external-data-collection capabilities, including the use of Cortex XDR API to receive external alerts.

We can organize this training at your preferred date and location. Contact Us!

Prerequisites

Participants must have completed EDU-260 (Cortex XDR: Prevention and Deployment).

What You Will Learn

Investigate and manage incidents
Describe the Cortex XDR causality and analytics concepts
Analyze alerts using the Causality and Timeline Views
Work with Cortex XDR Pro actions such as remote script execution
Create and manage on-demand and scheduled search queries in the Query Center
Create and manage the Cortex XDR rules BIOC and IOC
Working with Cortex XDR assets and inventories
Write XQL queries to search datasets and visualize the result sets
Work with Cortex XDR’s external-data collection

Training Outline

1 - Cortex XDR Incidents

2 - Causality and Analytics Concepts

3 - Causality Analysis of Alerts

4 - Advanced Response Actions

5 - Building Search Queries

6 - Building XDR Rules

7 - Cortex XDR Assets

8 - Introduction to XQL

9 - External Data Collection

Why Choose Bilginç IT Academy

At Bilginç IT Academy, we combine our strong presence in both the UK and Türkiye to deliver high-quality, practical training solutions for organizations worldwide.

International Presence with Local Expertise
With operations in the United Kingdom and Türkiye, we bring together global standards and local market understanding to deliver effective training experiences across regions.

Expert Instructors with Real-World Experience
Our courses are delivered by certified trainers with extensive industry experience, ensuring you gain practical knowledge that can be applied immediately.

Corporate-Focused Training Approach
We specialize in training corporate teams, tailoring our programs to meet your organization’s goals, technologies, and project requirements.

Flexible Training Delivery Worldwide
We offer classroom, virtual classroom, and onsite training options globally, tailored to your organization’s needs.

Hands-On, Practical Learning
Our training sessions include real-world scenarios, case studies, and interactive exercises to ensure lasting understanding and skill development.

Proven Track Record
With over 10 years of experience, we have successfully trained professionals from leading organizations across different industries and regions.

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Bahrain has positioned itself as the pioneering fintech and cloud capital of the Middle East, with Manama hosting the region’s first dedicated fintech hub, Bahrain FinTech Bay. As the first country in the region to adopt a 'Cloud First' policy, Bahrain has attracted global giants like AWS to establish massive data center infrastructures on its shores. The University of Bahrain and various national initiatives are focused on cultivating a workforce that is highly proficient in blockchain, open banking, and cybersecurity. Our IT education services in Bahrain are tailored to this innovation-driven market, offering advanced curriculum in Cloud Engineering, DevOps, and Information Security. We empower professionals in the Kingdom to take the lead in a digital-first economy that consistently sets the benchmark for regulatory technology and financial innovation across the Gulf.

Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Bahrain

Prerequisites

What You Will Learn

Training Outline

Why Choose Bilginç IT Academy

Avaible Training Dates