PCXDR-SOI Cortex XDR: Security Operations and Integration

Course Duration

3 Days

Audience

Employees of federal, state and local governments; and businesses working with the government.

Prerequisites

Attendees should possess a solid understanding of cybersecurity principles, including network and endpoint security concepts.

Course Description

The Cortex XDR: Security Operations and Integration (PCXDR-SOI) course is a three-day, instructor-led training that teaches security engineers and operations professionals how to deploy, configure, and integrate the Cortex XDR platform. You will learn the roles of Cortex XDR components including endpoint agents, XDR collectors, NGFWs, and Broker VMs. You will use XQL to query and analyze logs for effective data ingestion and threat detection, design and implement security workflows, and apply External Dynamic Lists and indicator rules to enforce security policies. This course is designed for security engineers responsible for building and operating Cortex XDR deployments.

Learning Objectives

• Describe the role of Cortex XDR components including endpoint agents, XDR collectors, NGFWs, and Broker VMs
• Configure data ingestion sources and verify log collection within Cortex XDR
• Use XQL to query and analyze logs for threat detection and investigation
• Design and implement security operation workflows within the Cortex XDR platform
• Apply External Dynamic Lists and indicator rules to enforce security policies
• Integrate Cortex XDR with third-party security tools and data sources
• Monitor and tune Cortex XDR alert rules and detection policies

Course Outline

Course Topics

• Cortex XDR Architecture and Components
• Endpoint Agent Deployment and Configuration
• XDR Collectors and Broker VM Setup
• Data Ingestion and Log Source Configuration
• XQL: Querying and Analyzing Log Data
• Security Workflow Design and Implementation
• External Dynamic Lists and Indicator Management
• Third-Party Integration and API Usage
• Alert Tuning and Detection Policy Management

Frequently Asked Questions