Overview
Explore
Expertise
Ecosystem
55 results found
Introduction to XQL: Writing Your First Query
Learning a new programming or query language can be daunting, but if you've used the boolean options in a web search engine before, you can master XQL queries in no time. Like with web searches, we start with a hypothesis of our search, add filters to limit our results, and then validate the results that are returned against our hypothesis.
PAN-OS and EDLs - Everything You Wanted to Know about External Dynamic Lists
External Dynamic Lists (EDLs) in Palo Alto Firewalls dynamically integrate IPs, URLs, and domains into security policies, reducing change requests. They empower SOCs to manage threats without firewall changes. Despite limitations, EDLs enhance security by automating updates and supporting authentication. Implementing EDLs optimizes security posture and streamlines threat management.
Navigating the Browser Security Stack: Models, Considerations, Vendors
Browser security has quickly become a growing area in cybersecurity, especially as AI tools start acting inside the browser on our behalf. This piece takes a vendor-agnostic look at the different ways to secure the browser, where each approach fits, and how it connects to the rest of your security stack.
Introduction to XQL: Writing Your First Correlation Rule
Correlation Rules in Cortex XDR and XSIAM are how we can use XQL queries to detect patterns, anomalies or sequences of activities that could indicate malicious behavior, even when each individual event might not appear suspicious on its own. Correlation Rules typically leverage data from multiple datasets, but for our example, we'll keep it simple to alert on failed login attempts to a NGFW, and build on the query later.
Cortex Agentic Endpoint Security: Watching the Layer Your EDR Forgot
AI agents now run on every endpoint in the enterprise, acting on the user's own permissions with nobody tracking what they touch. Koi Agentic Endpoint Security is Palo Alto Networks' answer to a blind spot traditional EDR and XDR clients were never built to see.
The State of Data Loss Prevention
Data Loss Prevention has regained prominence in recent years due to large scale breaches and increasingly stringent regulatory requirements. Vendors with varying tech heritages have been lining up to employ new technologies and techniques against this seemingly never-ending problem.
Empowering Safe AI Adoption with Palo Alto Networks' AI Access Security
Palo Alto Networks' AI Access Security offers a comprehensive solution for managing and securing generative AI applications. It provides real-time visibility, granular access controls and advanced data protection, enabling organizations to harness AI's potential while minimizing risks of data leakage and unauthorized access. Embrace AI responsibly with AI Access Security.
Introduction to XQL: Custom Datasets for Threat Hunting
Both Cortex XDR and XSIAM let you go well beyond endpoint telemetry from the XDR Agent by ingesting custom datasets through the Broker VM. Forwarding Proxmox syslogs, you can analyze failed logins and suspicious system activity directly in XQL. This unlocks the ability to correlate hypervisor events with endpoint, network, and identity data—all in one platform. Tracking brute-force attempts against pvedaemon, custom datasets give you visibility into layers that traditional EDR misses.
Introduction to Cortex XDR
Learn how Cortex XDR secures the future by rewiring security operations.
InfoSecurity Europe 2022 Recap
Two WWT security experts share their key takeaways from InfoSec Europe — from the enhanced focus on the cloud and increased sophistication of attacks — and the ways we have to respond to threats and attacks — to WWT's station domination of Prince Regents.
Stop Stacking Boxes. Start Designing Security.
Back-to-back firewalls were effective 15-20 years ago, but in today's encrypted, identity-driven and rapidly evolving threat landscape, they add cost and complexity without meaningful protection. Modern security replaces duplicated perimeters with platform-integrated NGFW enforcement, segmentation and coordinated prevention—delivering stronger, measurable defense through intelligent design rather than stacked legacy controls.
How to Optimize Your End-User Computing Environment to Escape the AI Price Increases
Escaping AI‑driven endpoint price increases comes down to smarter, data‑driven decisions across the endpoint estate. Using persona analysis, DEX insights and targeted optimizations, organizations can achieve meaningful gains today while extending device lifecycles and reducing near‑term spend.