Palo Alto ATC Logo

Cortex XDR: Investigation and Analysis (Ersatz für EDU-262)

Palo Alto ATC Logo

XDR is the industry's most powerful advanced detection and response platform. You will gain practical knowledge in the areas of endpoint management, case management, forensic analysis and platform automation. In this course, you will learn the key features of Cortex XDR. The course covers the intricacies of XDR, from the basic components to advanced strategies and techniques, including the skills required for case management, platform automation and orchestrating cybersecurity excellence.

Course Contents

  • Introduction to Cortex XDR
  • Endpoints
  • XQL
  • Alerting and Detection
  • Vulnerability & Forensics
  • Platform Automation
  • Case Management
  • Dashboards & Reports

E-Book Symbol You will receive the original course documentation by Palo Alto in English language as an e-book.

Request in-house training now

Target Group

This course is aimed at a wide range of security professionals, including SOC, CERT, CSIRT and XDR analysts, managers, incident responders and threat hunters. It is also well suited for professional services consultants, sales engineers and service delivery partners.

Knowledge Prerequisites

Participants should have basic knowledge of cybersecurity principles as well as experience in analyzing incidents and using security tools for investigations.

Course Objective

  • Investigate cases, analyze key resources and objects, and interpret the causal chain.</li
  • Query and analyze logs with XQL to gain meaningful insights.
  • Use advanced tools and resources for comprehensive case analysis.
  • Related certifications: Palo Alto Networks Certified XDR Analyst

Classroom training

Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!

Online training

You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.

Tailor-made courses

You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
Request in-house training now
PDF SymbolYou can find the complete description of this course with dates and prices ready for download at as PDF.

XDR is the industry's most powerful advanced detection and response platform. You will gain practical knowledge in the areas of endpoint management, case management, forensic analysis and platform automation. In this course, you will learn the key features of Cortex XDR. The course covers the intricacies of XDR, from the basic components to advanced strategies and techniques, including the skills required for case management, platform automation and orchestrating cybersecurity excellence.

Course Contents

  • Introduction to Cortex XDR
  • Endpoints
  • XQL
  • Alerting and Detection
  • Vulnerability & Forensics
  • Platform Automation
  • Case Management
  • Dashboards & Reports

E-Book Symbol You will receive the original course documentation by Palo Alto in English language as an e-book.

Request in-house training now

Target Group

This course is aimed at a wide range of security professionals, including SOC, CERT, CSIRT and XDR analysts, managers, incident responders and threat hunters. It is also well suited for professional services consultants, sales engineers and service delivery partners.

Knowledge Prerequisites

Participants should have basic knowledge of cybersecurity principles as well as experience in analyzing incidents and using security tools for investigations.

Course Objective

  • Investigate cases, analyze key resources and objects, and interpret the causal chain.</li
  • Query and analyze logs with XQL to gain meaningful insights.
  • Use advanced tools and resources for comprehensive case analysis.
  • Related certifications: Palo Alto Networks Certified XDR Analyst

Classroom training

Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!

Online training

You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.

Tailor-made courses

You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
Request in-house training now

PDF SymbolYou can find the complete description of this course with dates and prices ready for download at as PDF.