Cortex XSIAM: Security Operations, Integration and Automation (XSIAM-SOIA)

XSIAM is the industry's most comprehensive security incident and asset management platform, offering extensive coverage for securing and managing infrastructure, workloads, and applications across multiple environments. Throughout this course, you will explore the key features of Cortex XSIAM. This course is designed to enable you to:

• Describe how endpoint agents, XDR collectors, NGFWs, and Broker VMs secure networks and devices.
• Query and analyze logs using XQL for data ingestion and detection.
• Configure Threat Intel Management features, automate workflows, and apply EDLs and indicator rules.

With this release, Palo Alto are now replacing Cortex XSIAM for Security Operations and Automation (EDU-270) with the following two courses:

• Cortex XSIAM for Investigation and Analysis (XSIAM-IA) (2- day course for XSIAM analysts)
• Cortex XSIAM: Security Operations, Integration, and Automation (3-day course for XSIAM engineers)

Students may wish to take only one or both courses as applicable to their role.

Cortex XSIAM Security Ops Training Delivery Methods

• In-Person

• Online

• Upskill your whole team by bringing Private Team Training to your facility.

Cortex XSIAM Security Ops Training Information

Prerequisites

Participants should have a foundational understanding of cybersecurity principles and experience with network and endpoint security fundamentals.

Certification Information