- Speak to Sales: +1 512-599-8504
Master attack investigation and response in the Cortex XDR: Investigation and Response (EDU-262) course, learning to navigate the Incidents pages of the Cortex XDR console, understand causality and analytics, and utilize advanced tools like the EDL service and remote script execution, alongside crafting XDR rules and queries with XQL.
The Cortex XDR course provides hands-on training on activating a Cortex XDR instance and creating agent-installation packages and security policies to shield endpoints from sophisticated, fileless attacks.
This course covers incident management, Cortex XDR causality and analytics, alert analysis using Causality and Timeline Views, and advanced Cortex XDR Pro actions like remote script execution. It also teaches management of search queries and Cortex XDR rules, working with assets and inventories, and utilizing XQL for data search and visualization, along with external data collection capabilities.
Participants are required to have completed the EDU-260 (Cortex XDR: Prevention and Deployment) course prior to enrolling.
Level: Intermediate
Duration: 2 Days
Format: Instructor-Led Training
Supported Platforms: Cortex XDR
The course is ideal for Cybersecurity analysts, engineers, and security operations specialists.
As an Authorized Training Partner, Datacipher is celebrated for its outstanding educational programs and commitment to training excellence. Our distinction lies in the depth of expertise and passion of our trainers, who are not only seasoned professionals but also active security consultants with substantial real-world experience.
N/A
Can the EDU-262 course be taken online?
Yes. Our online Cortex XDR: Investigation and Response (EDU-262) course is delivered by expert instructors using web conferencing, with live demos and access to personal labs.
Is in-person classroom training available?
Yes, in-person sessions are available at our facilities or as customized on-site training. Check our “Price and Dates” section or contact us for details.
Will I receive official course materials?
Participants receive course materials in both electronic and printed forms, including detailed slides and recordings. Ensure bookings are confirmed at least ten days ahead for printed materials.
Can the electronic coursebook be printed?
Yes, the electronic coursebook is printable for flexible study options.
Do participants receive a certificate of completion?
Upon completion, participants receive an official Palo Alto Networks certificate of completion.
At DataCipher, we provide a range of payment options for our Palo Alto courses. Here’s what you can choose from:
Palo Alto Networks Training Credits and Vouchers – We accept both training credits and training vouchers issued by Palo Alto Networks. To enroll in a course using your credits or vouchers, please click the Register button. You’ll have the opportunity to apply these credits during the final step of the registration process.
Purchase Order (PO) – If your organization prefers using a purchase order, begin the registration by clicking the Register button. At the conclusion of the registration form, choose the option “My company will pay for it, please send an invoice with the payment details.” Our training team will then provide an official quote and any necessary additional information that your accounts department might need to issue the PO.
Bank Transfer – DataCipher maintains bank accounts in both the US and Europe, accommodating all standard bank transfer methods such as IBAN/BIC, Swift, ACH, or wire transfer. To make a payment via bank transfer, simply use the Register button to sign up for your selected course.
Credit Card Payments – We accept payments from all major credit cards, including Mastercard, VISA, American Express, Discover & Diners, and Cartes Bancaires. Payments can be made directly through the registration link or by requesting an invoice that includes a web link for online payment. All transactions are secure, and DataCipher does not store any credit card information.
These methods are designed to make the registration process as smooth and flexible as possible for all participants.
Guaranteed to Run – DataCipher is committed to running this class unless unforeseen events such as an instructor’s accident or illness occur.
Guaranteed on Next Booking – The course will proceed once an additional student registers.
Scheduled Class – We have scheduled this course and rarely cancel due to low enrollment. We offer a “Cancel No More Than Once” guarantee, ensuring that if a class is canceled due to insufficient enrollment, the next session will run regardless of the number of attendees.
Sold Out – If the class is fully booked, please use our contact form to join the waiting list or to inquire about additional sessions. We’re here to accommodate your training needs and keep you informed of new opportunities.
At DataCipher, we offer our training courses in both traditional full-day and convenient half-day formats. Our half-day classes are specifically designed for IT professionals who cannot be away from their workplaces for consecutive full days. This flexible schedule allows participants to dedicate a few hours to learning and then return to their regular work responsibilities.
The curriculum for both the full-day and half-day formats is identical. The primary difference is that the half-day classes spread the coursework over a more extended period, providing a balanced approach to professional education. DataCipher has been successfully running these half-day training sessions for several years, receiving consistently positive feedback from our customers. They appreciate the flexibility and report that the extended timeframe facilitates a deeper understanding of the material, as it gives them more time to absorb and reflect on the information learned.
Upon completing this instructor-led course with hands-on labs, participants will be proficient in managing and investigating incidents using Cortex XDR. They will gain expertise in analyzing alerts, utilizing advanced Cortex XDR Pro actions like remote script execution, and managing search queries and rules. Additionally, they will learn to handle assets, write XQL queries, and work with Cortex XDR’s external data collection capabilities.
Testimonials
