-
Please note: At the end of October 2024, Palo Alto Networks announced the restructuring of the existing certification program. Among other things, this will affect the existing PCNSA and PCNSE certifications. The PCNSA exam was discontinued on 31.01.2025.
Please note: In the English-language online format (dates are marked with an English flag in this case), the course also lasts four days from either 9.00-17.00 (Central European Time) or 08.00-16.00 (Irish Time).
-
This training is designed to enable SOC, CERT, CSIRT, or SOAR engineers to work with Cortex XSOAR integrations, playbooks, incident page layouts, and other system features to facilitate resource orchestration, process automation, case management, and analyst workflow. The third module of the course demonstrates a complete playbook development process for automating a typical analyst workflow for handling phishing incidents. This end-to-end view of the development process provides a framework for more focused discussions on individual topics covered in the other modules.
-
Course Contents
-
- Core Functionality and Feature Sets
- Enabling and Configuring Integrations
- Playbook Development
- Classification and Mapping
- Layout Builder
- Solution Architecture
- Docker
- Automation Development and Debugging
- The Marketplace and Content Management
- Indicators and Threat Intelligence Management
- Jobs and Job Scheduling
- Users and Role-Based Access Controls (RBAC)
- Integration Development
You will receive the original course documentation by Palo Alto in English language as an e-book.
-
Target Group
-
Security operations (SecOps) or security, orchestration, automation and response (SOAR) engineers, managed security service providers (MSSP), service delivery partners, system integrators and professional services engineers
-
Knowledge Prerequisites
-
Participants must complete the Cortex XSOAR Analyst digital learning program. Participants who have experience with scripting, using Python and JavaScript, and using JSON data objects will likely be able to apply what they have learned more quickly than participants without such experience. However, no knowledge of writing code is required to complete the course.
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.

-
Please note: At the end of October 2024, Palo Alto Networks announced the restructuring of the existing certification program. Among other things, this will affect the existing PCNSA and PCNSE certifications. The PCNSA exam was discontinued on 31.01.2025.
Please note: In the English-language online format (dates are marked with an English flag in this case), the course also lasts four days from either 9.00-17.00 (Central European Time) or 08.00-16.00 (Irish Time).
-
This training is designed to enable SOC, CERT, CSIRT, or SOAR engineers to work with Cortex XSOAR integrations, playbooks, incident page layouts, and other system features to facilitate resource orchestration, process automation, case management, and analyst workflow. The third module of the course demonstrates a complete playbook development process for automating a typical analyst workflow for handling phishing incidents. This end-to-end view of the development process provides a framework for more focused discussions on individual topics covered in the other modules.
-
Course Contents
-
- Core Functionality and Feature Sets
- Enabling and Configuring Integrations
- Playbook Development
- Classification and Mapping
- Layout Builder
- Solution Architecture
- Docker
- Automation Development and Debugging
- The Marketplace and Content Management
- Indicators and Threat Intelligence Management
- Jobs and Job Scheduling
- Users and Role-Based Access Controls (RBAC)
- Integration Development
You will receive the original course documentation by Palo Alto in English language as an e-book.
-
Target Group
-
Security operations (SecOps) or security, orchestration, automation and response (SOAR) engineers, managed security service providers (MSSP), service delivery partners, system integrators and professional services engineers
-
Knowledge Prerequisites
-
Participants must complete the Cortex XSOAR Analyst digital learning program. Participants who have experience with scripting, using Python and JavaScript, and using JSON data objects will likely be able to apply what they have learned more quickly than participants without such experience. However, no knowledge of writing code is required to complete the course.
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
