Palo Alto Cortex XSOAR

How the integration works

This integrated offering combines the visibility and context of Incydr – including its library of hundreds of Risk Indicators used to prioritize risk – with Cortex XSOAR’s comprehensive security orchestration platform to enable security teams to scale, standardize and automate their insider threat processes.

Key features

• Automate workflows: Pre-built playbooks triggered by Incydr alerts help you to automate incident response activity
• Manage departing employees: Use Cortex XSOAR to add or remove employees from Incydr Watchlists
• Forensic Search: Obtain complete context about exfiltrated files, including user, file and exposure type, file size and data source

Key benefits

1. Streamline work

   Streamline alerts and automate workflows to reduce the time it takes to detect and respond to data risk events.

2. Streamline work

   Quickly investigate file exposure or exfiltration across endpoints, email, cloud and SaaS apps – without leaving Cortex XSOAR.

3. Increased productivity

   Close incident tickets faster by automating response and remediation procedures via Cortex XSOAR.