## Palo Alto Networks Cortex XDR - IR
[Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr) is the world's first detection and response app that natively integrates network, endpoint, and cloud data to stop sophisticated attacks.  
However, this integration intent to simulate Cortex XDR incidents for a dedicated pupose of traninig. The fetched alerts 

### How to Enable the integration
1. No credentials are needed to enable the integration.
2. Check that the integration is set to `Fetch Incidents`.
3. Check that the mapper and classifier are both ended with the suffix of `CTF`.
4. Click on "save and exist" - no additional changes are needed. 

#### Note:
Keep in mind that all the required configuration for the CTF challenge can be found in the "Prepare your CTF" playbook.

---