XDR Best Practice Assessment (v1.0.3)
This content pack includes an incident type, custom fields, layout, and playbook to facilitate an XDR Best Practice Assessment for an existing deployment of Palo Alto Networks Cortex XDR Product. The assessment contains survey questions covering the following domains: Configurations, Agent Management, Policy and Profiles, Profile Extensions, Incident Management, and Incident Response. Answers to survey questions will be output to the incident layout along with best practice recommendations.
- Author
- Lauren Lee
- Support
- community
- Categories
- Forensics & Malware Analysis
Incident fields (60)
- XDR BPA Access Management
- XDR BPA Access Management Recommendation
- XDR BPA Agent Groups
- XDR BPA Agent Groups Recommendation
- XDR BPA Agent Install Packages
- XDR BPA Agent Install Recommendation
- XDR BPA Agent Profile
- XDR BPA Agent Profile Recommendation
- XDR BPA Agent VDI Flag
- XDR BPA Agent VDI Flag Recommendation
- XDR BPA Agent Versions
- XDR BPA Agent Versions Recommendation
- XDR BPA Alert Exclusions
- XDR BPA Alert Exclusions Recommendation
- XDR BPA Alerting
- XDR BPA Alerting Recommendation
- XDR BPA Broker VM
- XDR BPA Broker VM Recommendation
- XDR BPA Content Versions
- XDR BPA Content Versions Recommendation
- XDR BPA Dashboards
- XDR BPA Dashboards Recommendations
- XDR BPA Deployment Strategy
- XDR BPA Deployment Strategy Recommendation
- XDR BPA Device Control Profile
- XDR BPA Device Control Recommendation
- XDR BPA Device Exceptions
- XDR BPA Device Exceptions Recommendation
- XDR BPA Disk Encryption
- XDR BPA Disk Encryption Recommendation
- XDR BPA Exception Profile
- XDR BPA Exception Profile Recommendation
- XDR BPA Exploit Profile
- XDR BPA Exploit Profile Recommendation
- XDR BPA General Settings
- XDR BPA General Settings Recommendation
- XDR BPA Host Firewall
- XDR BPA Host Firewall Recommendation
- XDR BPA Host Isolation
- XDR BPA Host Isolation Recommendation
- XDR BPA Integrations
- XDR BPA Integrations Recommendation
- XDR BPA Live Terminal
- XDR BPA Live Terminal Recommendation
- XDR BPA Malware Profile
- XDR BPA Malware Profile Recommendation
- XDR BPA Management Overview
- XDR BPA Management Overview Recommendation
- XDR BPA Other Actions
- XDR BPA Other Actions Recommendation
- XDR BPA Policy Strategy
- XDR BPA Policy Strategy Recommendation
- XDR BPA Process Exceptions
- XDR BPA Process Exceptions Recommendation
- XDR BPA Reports
- XDR BPA Reports Recommendation
- XDR BPA Response Overview
- XDR BPA Response Overview Recommendation
- XDR BPA Restriction Profile
- XDR BPA Restriction Profile Recommendation
Layouts (1)
- XDR Best Practice Assessment
README
This content pack includes an incident type, custom fields, layout, and playbook to facilitate an XDR Best Practice Assessment for an existing deployment of Palo Alto Networks Cortex XDR Product.
The assessment contains survey questions covering the following domains: Configurations, Agent Management, Policy and Profiles, Profile Extensions, Incident Management, and Incident Response. Answers to survey questions will be output to the incident layout along with best practice recommendations.