PALO ALTO NETWORKS PAN-EDU-262 : PALO ALTO NETWORKS CORTEX™ XDR
INVESTIGATION AND RESPONSE
Public price : 2145€ (tax-free) per student
Related certification: PCDRA - Palo Alto Networks Certified Detection and Remediation Analyst
Duration: 14 hours (2 days)
Language : English
Satisfaction rate: 9,7/10 (40 reviews) - (Satisfaction rate between September 19, 2022 and October 10, 2024)
This instructor- led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics.
You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution.
Multiple modules focus on how to leverage the collected data. You will create simple search queries in one module and XDR rules in another. The course demonstrates how to use specialized investigation views to visualize artifact- related data, such as IP and Hash Views. Addition ally, it provides an introduction to XDR Query Language (XQL). The course concludes with Cortex XDR external- datacollection capabilities, including the use of Cortex XDR API to receive extern al alerts.
This course mixes theory and labs.
LEARNING OBJECTIVES:
Successful completion of this instructor- led course with hands- on lab activities should enable participants to:
- Investigate and manage incidents
- Describe the Cortex XDR causality and analytics concepts
- Analyze alerts using the Causality and Timeline Views
- Work with Cortex XDR Pro actions such as remote script execution
- Create and m an age on - demand and scheduled search queries in the Query Center
- Create and m an age the Cortex XDR rules BIOC and IOC
- Working with Cortex XDR assets and inventories
- Write XQL queries to search datasets and visualize the result sets
- Work with Cortex XDR’s external- data collection
LEARNER PROFILE:
- Cybersecurity analysts and engineers
- Security operations specialists
PREREQUISITES:
Participants must have completed PAN-EDU-260 (Cortex XDR: Prevention and Deployment).
COURSE MODULES:
1 - Cortex XDR Incidents
2 - Causality and Analytics Concepts
3 - Causality Analysis of Alerts
4 - Advanced Response Actions
5 - Building Search Queries
6 - Building XDR Rules
7 - Cortex XDR Assets
8 - Introduction to XQL
9 - External Data Collection
TEACHING TEAM:
All our trainers are certified by Palo Alto Networks.
The list of our trainers is available at : https://www.miel.fr/formation-faq#formateurs
Brice Grandvalet will be your trainer.
PERFORMANCE MONITORING AND EVALUATION:
- Attendance sheet
- Multiple choice questions
- Hands-on labs
- Satisfaction form
- Proof of attendance
TECHNICAL AND TEACHING RESOURCES:
- Remote tools (Teams or Zoom link provided to the student before the beginning of the training)
- Slides from Palo Alto Networks
- Theory and use cases
- Hands-on labs
- Multiple choice questions
CERTIFICATION TERMS AND CONDITIONS:
- Expected results at the end of the course : This training is a step to pass Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) certification.
- How to obtain : No other certification is needed to pass the exam of Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) certification. The voucher is not included in the price. The exam has to be done through Pearson VUE certification center (exam duration : 90 minutes).
- Certification details : Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA). This is the only available certification on Palo Alto Networks Cortex XDR.
Period of validity : 2 years
CLASSROOM CAPACITY: 3 to 8 students
ACCESS TIME : 8 to 12 weeks
ACCESSIBILITY: This training is only available remotely.
PAN-EDU-262 training is scheduled at the rate of one class per quarter (public classes).
In case of insufficient attendees (3 people minimum), classes might be cancelled 5 days prior to the beginning.
For People with Disabilities, please contact the Training Department : +33 1 60 19 16 27 or formation@miel.fr
