Cortex Director Peter Havens and Senior Staff Security Engineer Research Kyle Kennedy, the architect behind Palo Alto Networks' security automation program, reveal the secrets of the highly efficient Palo Alto Networks SOC.
Discover how automation can transform your security operations:
-The Impact of Automation on Analyst Morale: Learn how automating mundane tasks can boost job satisfaction, reduce burnout, and empower analysts to focus on high-impact investigations.
-The Evolution of Palo Alto's Automation Strategy: Gain insights into how the team shifted from a script-heavy approach to a more modular, playbook-driven model for greater scalability and maintainability.
-The Anatomy of a Successful Playbook: Explore the core components of Palo Alto Networks' automation playbooks, including deduplication, enrichment, assessment, and escalation.
-Measuring the Value of Automation: Understand how to quantify the ROI of automation efforts and prioritize initiatives based on real-world impact.
-A Day in the Life of a Security Automation Engineer: Get a behind-the-scenes look at how the automation team collaborates with analysts, identifies opportunities for improvement, and builds a continuously evolving automation ecosystem.
If you're looking for practical advice on how to build a more efficient and effective SOC, this video is a must-watch. Learn from the best in the industry and start your journey toward security automation excellence.
0:26 | Intro
0:45 | Discussion about the Palo Alto Networks SOC’s approach to security automation
1:40 | Why is security automation important to Palo Alto Networks
4:16 | Sole Crushing Work: How machines have improved team morale
7:49 | Automation workflows at Palo Alto Networks.
8:50 | Working alongside the IT and SOC Analysts
10:17 | What does security automation at Palo Alto Networks look like (in XSOAR)
11:11 | Code or No Code automation
13:09 | Modular Playbooks vs. Monolithic Playbooks
15:40 | “Object-oriented” Playbooks
16:42 | Discussion on how Palo Alto Networks does security automation.
21:50 | Enriching data to streamline automation.
23:23 | How much does automation save Palo Alto Networks?
25:23 | How automation in XSIAM simplifies an analyst's day
27:30 | Automating the complex and most simple actions helps speed up security
28:30 | When should you automate security? When should you NOT automate security?
#cortexbypanw #securityautomation #SOC #cortexxsoar #cybersecurity #infosec #threatintelligence
✅ Subscribe to our channel to stay up-to-date: @PaloAltoNetworksCortex
Did you find this video helpful? Hit the thumbs up and comment below!
Learn more. Visit our website, blog, and social media pages.
Website: www.paloaltone...
Blog: www.paloaltone...
Facebook: / paloaltonetworks
LinkedIn: / cortexbypanw
RU-vid: @PaloAltoNetworksCortex
X: / cortexbypanw
About Palo Alto Networks:
Palo Alto Networks is a global cybersecurity leader that continually delivers innovation to enable secure digital transformation - even as the pace of change accelerates. Palo Alto Networks helps your team to prevent successful cyberattacks with an automated approach that delivers consistent security across cloud, network, and mobile.
paloaltonetwork...
Learn more about Palo Alto Networks at www.paloaltone...
Copyright © 2024 Palo Alto Networks. All rights reserved.
5 сен 2024
