Objectives

Successful completion of this instructor-led course with hands-on lab activities should enable you to:

• Describe the architecture and components of the Cortex XDR family
• Use the Cortex XDR management console, including reporting
• Create Cortex XDR agent installation packages, endpoint groups, and policies
• Deploy Cortex XDR agents on endpoints
• Create and manage Exploit and Malware Prevention profiles
• Investigate alerts and prioritize them using starring and exclusion policies 
• Tune Security profiles using Cortex XDR exceptions
• Perform and track response actions in the Action Center
• Perform basic troubleshooting related to Cortex XDR agents
• Deploy a Broker VM and activate the Local Agents Settings applet
• Understand Cortex XDR deployment concepts and activation requirements
• Work with the Customer Support Portal and Cortex XDR Gateway for authentication and authorization

Course Modules

1. Cortex XDR Introduction
2. Cortex XDR Main Components
3. Cortex XDR Management Console
4. Profiles and Policy Rules
5. Malware Protection
6. Exploit Protection
7. Cortex XDR Alerts
8. Exclusions and Expections
9. Response Actions
10. Basic Troubleshooting
11. Broker VM Overview
12. Deployment Considerations

Target Audience 

The Cortex XDR 3: Prevention, Analysis & Response (EDU-260) course is intended for Cybersecurity analysts and engineers and security operations specialists, as well as administrators and product deployers.

Certification

The Cortex XDR: Prevention, Analysis, and Response (EDU-260) course is linked to PCDRA certification

Palo Alto Networks Training Credits:

Training credits are a convenient way to purchase instructor-led training courses. Red Education is one of the few Globally Accredited Training partners that provides training across all Palo Alto Networks' authorised courseware. Credits may be used for private, public, On-site or virtual instructor-led training. We can facilitate all your organisation's training requirements through one transaction covering all parts of the world. Winner of "consecutive Training Partner of the Year Awards and Instructor of the Year Awards", our instructors can deliver premium training in any language across any time zone. Red Education is a one-stop shop. We can facilitate all your global training requirements and are here to assist you with local advice to walk you through this process.

Prerequisites

Participants must be familiar with enterprise product deployment, networking, and security concepts.

Datasheets

Please see the Palo Alto Course outline for detailed agenda.