Palo Alto Networks Certified Security Operations Generalist: key terms

Flashcards for this exam Palo Alto Networks Certified Security Operations Generalist guide Class dates

• Cortex XDRPalo Alto Networks' extended detection and response platform combining endpoint protection with network, cloud and identity analytics.Intermediate
• Cortex XDR AgentThe Palo Alto Networks endpoint agent that provides prevention, detection and response capabilities for Cortex XDR.Advanced
• Cortex XSIAMPalo Alto Networks' AI-driven security operations platform that combines SIEM, XDR, SOAR, ASM and threat intelligence.Advanced
• Cortex XSOARPalo Alto Networks' security orchestration, automation and response platform with case management and threat intelligence management.Advanced
• DetonationExecuting a suspicious file or opening a URL in a sandbox to trigger and observe any malicious behavior.Intermediate
• DNS SinkholeA DNS server configuration that returns a controlled IP for known malicious domains to block and identify infected hosts.Intermediate
• Extended Detection and Response (XDR)A security platform that correlates telemetry across endpoints, network, cloud, identity and email for unified detection and response.Intermediate
• Malware SandboxAn isolated, instrumented environment where suspicious files or URLs are executed safely to observe behavior.Intermediate
• Managed Detection and Response (MDR)An outsourced service providing 24x7 threat detection, investigation and active response using the provider's tools and analysts.Intermediate
• WildFirePalo Alto Networks' cloud-based malware analysis service that detonates unknown files and links to produce verdicts and signatures.Intermediate