Security Operations Center (SOC) Fundamentals — Cloud Security Professional

Official references for this objective

• Paloaltonetworks — Automate Security Operations with Cortex - Palo Alto Networks

  when a ransomware attack is detected by Cortex XDR, a ransomware playbook is triggered to collect the required information from your environment, execute investigation steps,

• Paloaltonetworks — Palo Alto Networks Introduces Cortex XSOAR, Redefines Security Orchestration and Automation with Integrated Threat Intel Management - Palo Alto Networks

  aggregating disparate sources, customizing and scoring feeds, and matching indicators against a customer's specific environment, as well as leveraging playbook automation to drive instant action

• Paloaltonetworks — Palo Alto Networks Ushers in the Next-Generation Security Operations Center With General Availability of Cortex XSIAM -- the Autonomous Security Operations Platform - Palo Alto Networks

  Design partners consistently reported improved visibility, fewer incidents, reduced false positives and reduced mean time to response.

• Paloaltonetworks — Palo Alto Networks Delivers the Industry's First Cloud-Optimized SOC Platform - Palo Alto Networks

  SOC analysts can now utilize a new Cloud Command Center for complete visibility into cloud assets.

• Paloaltonetworks — Palo Alto Networks Introduces the Autonomous Security Platform, Cortex XSIAM, to reimagine SIEM and SOC Analytics - Palo Alto Networks

  XSIAM is the revolutionary approach that collects granular data — not just logs and alerts — to drive machine learning for natively autonomous response actions

• Paloaltonetworks — Palo Alto Networks Redefines Detection and Response with Cortex XDR 2.0 - Palo Alto Networks

  An XDR approach automates this process, correlating the data in one place to give analysts immediate context to understand the scope of the attack

• Paloaltonetworks — Palo Alto Networks Takes On Identity Attacks, Extends its Cortex XSIAM Platform with AI-driven Identity Threat Detection and Response - Palo Alto Networks

  the XSIAM platform now integrates all identity data sources into a single security data foundation spanning endpoints, networks and cloud