Book by 31st March for 20% Off

Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions

Learn to automate incident response, build playbooks, integrate tools, and streamline SOC workflows with Cortex XSOAR.
Course Duration

4 Days

Target Audience

• SOC / SIEM / Automation Engineers • MSSPs and Service Delivery Partners working with XSOAR

Course Overview

The Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions course is a four-day instructor-led training with a

blend of lectures and hands-on labs. This training will enable students to use Cortex XSOAR to:

• Conduct incident investigation and response activities on a phishing campaign

• Create custom dashboards and generate reports

• Install multiple engines and configure a load balancing group

Use built-in and external integrations to ingest incidents and automate security processes

• Plan and implement an automation use case by building playbooks and automation scripts

Key Learning Objectives

By the end of this training, participants will be able to:

  • Understand and configure Cortex XSOAR system features including integrations, playbooks, and incident layouts.

  • Develop and deploy automated playbooks to streamline SOC analyst workflows.

  • Orchestrate resources and automate processes for faster, more effective incident response.

  • Apply case management techniques to improve collaboration and operational efficiency.

  • Build and refine automation for phishing incident handling as a model for broader use cases.

Palo Alto Networks Cortex XSOAR: Engineering Security Automation Solutions

Course Modules

  • Course Introduction
  • XSOAR Overview
  • Incident Management
  • Threat Intelligence
  • Analyst Investigations
  • Dashboards, Reports, and Timers
  • Integrations and Content Management
  • Architecture
  • Use Case Planning and Implementation
  • Playbook Development
  • Automation Scripts

Palo Alto Networks Training Credits:

Training credits are a convenient way to purchase instructor-led training courses. Red Education is one of the few Globally Accredited Training partners that provides training across all Palo Alto Networks’ authorised courseware. Credits may be used for private, public, On-site or virtual instructor-led training. We can facilitate all your organisation’s training requirements through one transaction covering all parts of the world. Winner of “consecutive Training Partner of the Year Awards and Instructor of the Year Awards”, our instructors can deliver premium training in any language across any time zone. Red Education is a one-stop shop. We can facilitate all your global training requirements and are here to assist you with local advice to walk you through this process.

Your Gateway

INTERESTED IN THIS COURSE FOR YOURSELF, BUSINESS OR TEAM?

Register Now

prerequisites
Participants should have a basic understanding of:• Networking concepts, such as identifying private IPs and domains • Cybersecurity concepts, such as Indicators of Compromise • Navigating Windows and Linux environments using the GUI and CLI