thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

Cortex XSOAR

Palo Alto Networks' security orchestration, automation and response platform with case management and threat intelligence management.

Definition

XSOAR runs playbooks built from tasks, integrations and scripts, manages incidents with a War Room for collaboration and supports hundreds of vendor integrations from the Marketplace. Its Threat Intel Management module aggregates and scores indicators.

Example

A phishing playbook that parses an email, enriches indicators, detonates attachments and blocks malicious URLs on the firewall.

Exam tip

Know XSOAR building blocks: playbooks, integrations, scripts, incident types, layouts and the War Room.

Related terms