Participants should have a foundational understanding of cybersecurity principles and experience with analyzing incidents and using security tools for investigation.
Objective
The "Palo Alto Cortex XDR: Investigation and Analysis (EDU-262)" course teaches you in-depth knowledge of endpoint management, forensic analysis, incident investigation, and platform automation. Through interactive exercises and realistic scenarios, you will learn to effectively use the core features of Cortex XDR and strengthen your organization's cybersecurity defenses: After completing the course, you will be able to investigate security incidents, analyze key assets and artifacts, and interpret chains of causality; search logs using XQL (XDR Query Language) to gain meaningful insights; and utilize advanced tools and automation features for comprehensive incident analysis and efficient response.