Palo Alto Networks Certified XSIAM Analyst

While working an incident a Cortex XSIAM analyst notices that important data is not being collected from an affected machine. The data identified is process ID...

Which two features can trigger Cortex XSIAM playbooks? (Choose two.)

Which tab in the XQL search page has information on the various field data types?

A user navigates to a non-malicious URL. The firewall logs contain information on the network connection, and the endpoint logs contain information on the proce...

In which two ways can scheduled XQL queries be made to run efficiently? (Choose two.)