Blog
Security Operations

Security Operations

SmartGrouping - Precision AI™-Driven Investigation

SmartGrouping is a crucial aspect of security operations, allowing to connect disparate alerts and paint a comprehensive picture of an attack. It's like piecing together a puzzle, where each alert represents a piece, and the complete picture reveals the attacker's intent, methodology and scope of impact.

Product Features

Uncategorized

Use-Cases

May 23, 2024

By Niv Sela and Roi Shaubi

Security Operations

Must-Read Articles, Product Features

Securing Kubernetes Clusters: The Cortex XDR and XSIAM Approach

Kubernetes has revolutionized the way we deploy and manage applications, but its complexity and dynamic nature also introduce a new set of security ch...

May 14, 2024

By Or Kliger

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Response to Living-Off-the-Land (LOTL) Att...

Organizations face increasingly sophisticated cyberattacks in today's rapidly evolving threat landscape. Attackers leverage common tools and living-Of...

May 09, 2024

By Erez Felman Dar

Announcement, Must-Read Articles, Product Features

Cortex Copilot - In SecOps, You Should Secure Smarter, Not Harder

There are a lot of moving parts in security operations. As cyberthreats continue advancing in speed and complexity, analysts must investigate and reme...

May 07, 2024

By Gil Blum and Greg Smith

Must-Read Articles, Use-Cases

Leading with a Prevention-First Approach for Cloud Detection and Response

As cloud computing continues to evolve and becomes the ad-hoc standard for many of the world’s largest enterprises, we also see attack surfaces growing and the escalation of cybert...

Apr 17, 2024

By Elad Koren

More Blogs

Displaying 1—16 of

420 results

Sort By:

Announcement, Must-Read Articles, News and Events, Product Features, Products and Services

Forrester Names Palo Alto Networks a Leader in XDR

Since our founder, Nir Zuk, first coined the term “extended detection and response” nearly 6 years ago, we have been on a mission to make XDR the foundation of modern security oper...

Jun 03, 2024

By Gonen Fink

Company & Culture, Customer Spotlight, Must-Read Articles, Product Features, Products and Services, Use-Cases

AI Powers Sabre's Enhanced Threat Detection & Response

As the cyberthreat landscape continues to evolve at an unprecedented pace, security teams are turning to artificial inte...

May 28, 2024

By Dena De Angelo

Company & Culture, Products and Services, Unit 42

Creating a Security Program with Less Complexity and More Visibility

Developing a strong security program is like tending a garden. It takes a lot of work, and you don’t always see immediate results. Every day you water...

May 23, 2024

By Unit 42

Must-Read Articles, Points of View, Products and Services

AI in Cyber Is Here to Stay — How to Weather This Sea Change

“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42, with roles in AI rese...

May 22, 2024

By Dena De Angelo

Product Features, Products and Services, Unit 42

Prowling the Wilds — Upgrade Your SOC and Hunt Down Threats

It would be nice to imagine our SOC analysts as the apex predators of the IT jungle, stalking the network perimeter and tracking the scent of trespass...

May 21, 2024

By Unit 42

Must-Read Articles, Points of View, Products and Services

The Dark Side of AI in Cybersecurity — AI-Generated Malware

“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42, with roles in AI rese...

May 15, 2024

By Dena De Angelo

Must-Read Articles, Products and Services

AI's Offensive & Defensive Impacts

As the hype around AI continues to ramp up, cybersecurity practitioners are trying to separate reality from fiction when it comes to how artificial intelligence will impact their field. Our discussion includes...

May 01, 2024

By Dena De Angelo

Announcement, Must-Read Articles, News and Events

Confirm Attack Surface Vulnerabilities with Cortex Xpanse Attack Surface Te...

As organizations’ attack surfaces continue to grow, we’ve seen that traditional vulnerability testing is insufficient to secure an organization’s exte...

Apr 15, 2024

By Greg Heon

Announcement, Must-Read Articles, News and Events, Product Features

XSOAR 8 On-Premises Now Available!

We are pleased to announce the support for on-premises deployments for XSOAR 8. New customers of Cortex XSOAR 8 who require an on-premises deployment for policy or regulatory reasons can now take advantage of t...

Apr 15, 2024

By Alon Yardeni

Announcement, News and Events, Product Features

What’s Next in Cortex — XSIAM for Cloud and Other Innovations

Security operations teams are tasked with solving a variety of different challenges. They face the complexities of protecting growing and dynamic clou...

Apr 15, 2024

By Gonen Fink

Playbook of the Week

Playbook of the Week: Prisma Cloud Compute - Compliance Alert v2

Maintaining compliance with regulations and security standards is paramount for organizations in today's dynamic and ever-evolving cybersecurity landscape. However, simply receivin...

Apr 11, 2024

By Tomer Haimof

Playbook of the Week

Playbook of the Week: Streamlining Suspicious Data Upload Alert Investigati...

Data exfiltration refers to the unauthorized transfer of sensitive or confidential information from a network or system to an external location. This covert activity often occurs s...

Apr 05, 2024

By Tal Nossen

Must-Read Articles, Product Features, Products and Services

The Power of AI Assistants and Advanced Threat Detection

One short-term prediction from Spisak is the emergence of AI-powered cybersecurity “assistants,” which he envisions will serve as co-pilots to defenders, boosting their efficiency in responding to threats.

Apr 04, 2024

By Dena De Angelo

Must-Read Articles

On Credible and Cyber-Contextual Labeling

Machine learning (ML) powered methods are rapidly taking over the cybersecurity medium, performing a variety of complex tasks, including detection, prevention, and prioritization. Albeit not required by all met...

Apr 04, 2024

By Gal Itzhak

Must-Read Articles, Product Features, Products and Services

AI, Cybersecurity and the Rise of Large Language Models

Artificial intelligence (AI) plays a crucial role in both defending against and perpetrating cyberattacks, influencing the effectiveness of security measures and the evolving nature of threats in the digital la...

Apr 02, 2024

By Yitzy Tannenbaum

Must-Read Articles, Product Features, Products and Services

Witnessing a Revolution in Cybersecurity with AI

“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42, with roles in AI research, product management, consulting, engineering and more....

Mar 27, 2024

By Dena De Angelo

Load more blogs

More Blogs

Displaying 1—16 of

410 results

Sort By:

Announcement, Must-Read Articles, News and Events, Products and Services

Palo Alto Networks Recognized as a Leader in the 2023 Gartner Magic Quadran...

In an era when cyberthreats are evolving faster than ever before, cyber defenders around the world are looking for solutions to give them the upper ha...

Jan 12, 2024

By Gonen Fink

Must-Read Articles, Points of View, Product Features, Products and Services

AI in Cybersecurity — A CISO’s Perspective

“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42 with roles in AI research, product management, consu...

Mar 06, 2024

By Dena De Angelo

Announcement, Must-Read Articles, News and Events, Products and Services

ONLY Cortex Delivers 100% Protection and Detection in MITRE Engenuity

Listen to the 2023 MITRE ATT&CK ResultsThe results of the fifth round of the MITRE Engenuity ATT&CK Evaluations have been released, and while...

Sep 20, 2023

By Peter Havens

Announcement, Company & Culture, Must-Read Articles, News and Events

Unit 42 MDR Recognized as a Leader in MDR

We are pleased to announce that Unit 42 MDR has been named as a leader in the Frost Radar™: Global MDR Market evaluation.

Mar 07, 2024

By Sharon Maydar

Must-Read Articles, Products and Services

5 Unique Challenges for AI in Cybersecurity

AI tends to be understood as one coherent field of study and application where similar solutions apply for all the use cases. The reality is that applying AI in real-world environments with high precision requi...

Mar 12, 2024

By Yoni Allon

Announcement, Must-Read Articles, News and Events

What’s Next in Cortex - Expanded Visibility and Enhanced Protections with L...

At Palo Alto Networks, we're constantly pushing the boundaries of security, and our latest wave of innovations is no exception. With our newest featur...

Feb 12, 2024

By Gonen Fink

Must-Read Articles, Points of View, Products and Services

Let AI Handle the Heavy Lifting in the Modern SOC

Mar 13, 2024

By Dena De Angelo

Must-Read Articles, Product Features, Products and Services

Witnessing a Revolution in Cybersecurity with AI

Mar 27, 2024

By Dena De Angelo

Must-Read Articles, Product Features, Products and Services

Short, Mid and Long-Term Impacts of AI in Cybersecurity

Feb 01, 2024

By Dena De Angelo

Must-Read Articles, Products and Services

Who’s the Boss? Teaming Up With AI in Security

Feb 14, 2024

By Dena De Angelo

Must-Read Articles, Products and Services

Harnessing the Power of AI in Cybersecurity — Predictions and Solutions

“AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42 with roles in AI resea...

Feb 07, 2024

By David Moulton

Must-Read Articles, Product Features, Products and Services

AI, Cybersecurity and the Rise of Large Language Models

Apr 02, 2024

By Yitzy Tannenbaum

Playbook of the Week, Uncategorized

Playbook of the Week: Automating Management of XDR Identity Analytics Alert...

Identity analytics is a critical cybersecurity tool in combating the challenges posed by compromised user accounts and malicious insiders. Identity th...

Mar 07, 2024

By Omri Itzhak

Must-Read Articles, Non classifié(e), Product Features

A Deep Dive Into Malicious Direct Syscall Detection

In this blog post we will explain how attackers use direct syscalls to overcome most EDR solutions, by first discussing the conventional Windows syscall flow and how most EDR solutions monitor those calls. Then...

Feb 13, 2024

By Or Chechik and Ofir Ozer

Announcement, Must-Read Articles, Product Features, Products and Services

XSIAM 2.0: Continuing to Drive SOC Transformation

Security teams have an important and difficult job – protecting their organizations from a threat landscape that is constantly changing. Based on investigations conducted by our Un...

Nov 13, 2023

By Gonen Fink

Playbook of the Week, Uncategorized

Playbook of the Week: Using YARA to Automate Malware Identification and Cla...

In the dynamic realm of cybersecurity, maintaining a proactive defense against evolving threats is non-negotiable. One potent weapon that has emerged...

Feb 01, 2024

By Yarden Altmann

Load more blogs