Palo Alto Cortex XDR: New incident detected

This rule is part of a beta feature. To learn more, contact Support.
palo-alto-cortex-xdr

Classification:

attack

Tactic:

TA0002-execution

Technique:

T1059-command-and-scripting-interpreter

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Goal

Monitor and respond to new incidents generated by Palo Alto Cortex XDR.

Strategy

Trigger notifications for any new incident generated by Palo Alto Cortex XDR. See Triage Incidents in the Cortex Help Center for more information.

Triage and response

  1. Investigate the new incident details from here {{@xdr_url}}, focusing on the severity level {{@severity}}.
  2. Notify the appropriate team for further analysis.
  3. Adhere to organizational protocols to effectively address and mitigate the incident impact.