This instructor-led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics.

You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution.

Multiple modules focus on how to leverage the collected data. You will create simple search queries in one module and XDR rules in another. The course demonstrate how to use specialized investigation views to visualize artifact-related data, such as IP and Hash Views. Additionally, it provides an introduction to XDR Query Language (XQL). The course concludes with Cortex XDR external-data-collection capabilities, including the use of Cortex XDR API to receive external alerts.

We can organize this training at your preferred date and location. Contact Us!

Prerequisites

Participants must have completed EDU-260 (Cortex XDR: Prevention and Deployment).

What You Will Learn

Investigate and manage incidents
Describe the Cortex XDR causality and analytics concepts
Analyze alerts using the Causality and Timeline Views
Work with Cortex XDR Pro actions such as remote script execution
Create and manage on-demand and scheduled search queries in the Query Center
Create and manage the Cortex XDR rules BIOC and IOC
Working with Cortex XDR assets and inventories
Write XQL queries to search datasets and visualize the result sets
Work with Cortex XDR’s external-data collection

Training Outline

1 - Cortex XDR Incidents

2 - Causality and Analytics Concepts

3 - Causality Analysis of Alerts

4 - Advanced Response Actions

5 - Building Search Queries

6 - Building XDR Rules

7 - Cortex XDR Assets

8 - Introduction to XQL

9 - External Data Collection

Why Choose Bilginç IT Academy

At Bilginç IT Academy, we combine our strong presence in both the UK and Türkiye to deliver high-quality, practical training solutions for organizations worldwide.

International Presence with Local Expertise
With operations in the United Kingdom and Türkiye, we bring together global standards and local market understanding to deliver effective training experiences across regions.

Expert Instructors with Real-World Experience
Our courses are delivered by certified trainers with extensive industry experience, ensuring you gain practical knowledge that can be applied immediately.

Corporate-Focused Training Approach
We specialize in training corporate teams, tailoring our programs to meet your organization’s goals, technologies, and project requirements.

Flexible Training Delivery Worldwide
We offer classroom, virtual classroom, and onsite training options globally, tailored to your organization’s needs.

Hands-On, Practical Learning
Our training sessions include real-world scenarios, case studies, and interactive exercises to ensure lasting understanding and skill development.

Proven Track Record
With over 10 years of experience, we have successfully trained professionals from leading organizations across different industries and regions.

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Kuwait is rapidly advancing its digital landscape as part of the 'New Kuwait 2035' vision, with Kuwait City serving as the nation’s primary hub for technological integration and financial services. The country is investing heavily in modernizing its public sector and national infrastructure through large-scale cloud computing and cybersecurity initiatives. Supported by institutions like Kuwait University and the Kuwait Institute for Scientific Research, the local tech ecosystem is shifting toward high-end data analytics and software engineering. Our IT training programs in Kuwait are strategically designed to support this national transformation, providing professionals with the elite technical skills required to manage sophisticated enterprise systems. We offer specialized certifications in Network Security, Cloud Architecture, and Digital Leadership to ensure that Kuwait's workforce remains at the forefront of the region's evolving digital economy.

Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Kuwait

Prerequisites

What You Will Learn

Training Outline

Why Choose Bilginç IT Academy

Avaible Training Dates