This instructor-led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics.

You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution.

Multiple modules focus on how to leverage the collected data. You will create simple search queries in one module and XDR rules in another. The course demonstrate how to use specialized investigation views to visualize artifact-related data, such as IP and Hash Views. Additionally, it provides an introduction to XDR Query Language (XQL). The course concludes with Cortex XDR external-data-collection capabilities, including the use of Cortex XDR API to receive external alerts.

We can organize this training at your preferred date and location. Contact Us!

Prerequisites

Participants must have completed EDU-260 (Cortex XDR: Prevention and Deployment).

What You Will Learn

Investigate and manage incidents
Describe the Cortex XDR causality and analytics concepts
Analyze alerts using the Causality and Timeline Views
Work with Cortex XDR Pro actions such as remote script execution
Create and manage on-demand and scheduled search queries in the Query Center
Create and manage the Cortex XDR rules BIOC and IOC
Working with Cortex XDR assets and inventories
Write XQL queries to search datasets and visualize the result sets
Work with Cortex XDR’s external-data collection

Training Outline

1 - Cortex XDR Incidents

2 - Causality and Analytics Concepts

3 - Causality Analysis of Alerts

4 - Advanced Response Actions

5 - Building Search Queries

6 - Building XDR Rules

7 - Cortex XDR Assets

8 - Introduction to XQL

9 - External Data Collection

Why Choose Bilginç IT Academy

Experience live, interactive learning from the comfort of your home or office with Bilginç IT Academy's Online Instructor-Led Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Kazakhstan. Engage directly with expert trainers in a virtual environment that mirrors the energy and schedule of a physical classroom.

Live Sessions: Join scheduled classes with a live instructor and other delegates in real-time.
Interactive Experience: Engage in group activities, hands-on labs, and direct Q&A sessions with your trainer and peers.
Global Expert Trainers: Learn from a handpicked global pool of expert trainers with deep industry experience.
Proven Expertise: Benefit from over 30 years of quality training experience, equipping you with lasting skills for success.
Scalable Delivery: Accessible worldwide, including Kazakhstan, with flexible scheduling to meet your professional needs.

Immerse yourself in our most sought-after learning style for Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Kazakhstan. Our hand-picked classroom venues in Kazakhstan offer an invaluable human touch, providing a focused and interactive environment for professional growth.

Highly Experienced Trainers: Boost your skills with trainers boasting 10-20+ years of real-world experience.
State-of-the-Art Venues: Learn in high-standard facilities designed to ensure a comfortable and distraction-free experience.
Small Class Sizes: Our limited class sizes foster meaningful discussions and a personalized learning journey.
Best Value: Achieve your certification with high-quality training and competitive pricing.

Streamline your organization's training requirements with Bilginc IT Academy’s Onsite Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Kazakhstan. Experience expert-led learning at your own business premises, tailored to your corporate goals.

Tailored Learning Experience: Customize the training content to fit your unique business projects or specific technical needs.
Maximize Training Budget: Eliminate travel and accommodation costs, focusing your entire budget on the training itself.
Team Building Opportunity: Enhance team bonding and collaboration through shared learning experiences in your workspace.
Progress Monitoring: Track and evaluate your employees' progression and performance with relative ease and direct oversight.

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

Palo Alto Networks: Cortex XDR: Investigation and Response (EDU-262) Training in Kazakhstan

Prerequisites

What You Will Learn

Training Outline

Why Choose Bilginç IT Academy

Online Instructor-Led Training (VILT)

Classroom Based Learning

Onsite / In-House Learning

Avaible Training Dates