PSE-Cortex Exam Dumps - Palo Alto Networks System Engineer - Cortex Professional

Have XSOAR automatically add the IP address to a threat intelligence management (TIM) malicious IP list to elevate priority of future alerts.

Have XSOAR automatically add the IP address to a deny rule in the firewall.

Have XSOAR automatically add the IP address to an external dynamic list (EDL) used by the firewall.

Have XSOAR automatically create a NetOps ticket requesting a configuration change to the firewall to block the IP.

Security Event

HIP

Correlation

Analytics

extend context

stop on errors

task output

lags

endpoint protection platform (EPP)

Security Information and Event Management (SIEM)

endpoint detection and response (EDR)

Network Detection and Response (NDR)

It provides a statistical model for combining scores from multiple vendors

It resolves conflicting scores from different vendors with the same indicator.

It allows for comparison between open-source intelligence and paid services.

It helps identify threat feed vendors with invalid content.

windows event logs only

syslogs only

windows event logs, syslogs, and custom external sources

windows event logs and syslogs only

Administrators are exempt from generating alerts for 24 hours.

Process from WildFire analysis is whitelisted.

Triggered exploit protection module (EPM) for the host and process involved is disabled.

User is exempt from generating events for 24 hours.

Administrator Guide

LIVEcommunity

Release Notes

Palo Alto Networks Status Page