Cortex XDR Training Prevention, Analysis and Response (EDU260)

Course code: EDU260

The Palo Alto Networks Cortex XDR: Prevention, Analysis, and Response (EDU-260) course for advanced endpoint protection and remediation is an instructor-led training that will help you to: Differentiate the architecture and components of the Cortex XDR family, Activate XDR, deploy the agents, and work with the management console and more.

The Cortex XDR course teaches students how the agent protects against exploits and malware-driven attacks. In hands-on lab exercises, students will explore and configure the management platform and install XDR agent as well as relevant components; create security policies and profiles to protect endpoints against multi-stage, fileless attacks built using malware and exploits; respond to attacks using response actions; understand behavioural threat analysis, log stitching, agent-provided enhanced endpoint data, and causality analysis; investigate and triage attacks using the incident management page and analyze alerts using the Causality and Timeline analysis views; use API to insert alerts; create BIOC rules, and search a lead in raw data sets in Cortex Data Lake using the Query Builder