Cortex XDR

Extended detection and response platform providing endpoint protection, detection, and investigation capabilities with rich telemetry data

Vendor: Palo Alto Networks

Log Types

Comprehensive endpoint telemetry including process, file, network, and registry events

Security alerts generated by analytics, BIOC rules, and threat detection

console

https://<tenant>.xdr.paloaltonetworks.com

api

https://api-<tenant>.xdr.paloaltonetworks.com

syslog

SIEM forwarding via Broker VM