I found Cortex XDR effective for checking and reviewing security alerts. I really like how it combines activity, network, and user actions all together, which makes investigating any intention super smooth. It's great for process activity and network connections, helping me review security alerts much faster since all related steps and activity are in one place. I totally recommend it. Review collected by and hosted on G2.com.

As i said i didn't use it much to judge, just for a while and it was perfect along that. Review collected by and hosted on G2.com.

Cortex XDR helps solve the problem of detecting and responding to security threats across endpoints, network and cloud in one platform. It benefits me by giving better visibility into attacks and helping investigate and respond to incidents faster with fewer alerts to analyze. Integration with SIEM solutions is effective. Easy to use on a daily basis. Customer support is effective. Review collected by and hosted on G2.com.

It can be expensive and some advanced features require additional configuration or licensing to use fully. Review collected by and hosted on G2.com.

It provides a centralized logging system for all of my Palo Alto logs, keeping everything in one place and easier to review. Review collected by and hosted on G2.com.

It requires a license, and some parts can be difficult to learn if you don’t follow the proper guidance. I think this is because Palo Alto has changed names a few times now. Review collected by and hosted on G2.com.

I like the analysis and anomaly detection capabilities of Cortex XDR, as it supports my Blue Team in detecting potential cybersecurity incidents on a daily basis. I also highly value the extended telemetry capability that provides us with extensive details of all alerts and the validations that Cortex XDR has already performed on its own. Review collected by and hosted on G2.com.

The control of applications Review collected by and hosted on G2.com.

Advanced analytics and root-cause analysis. It displays the exact chain of events during an attack, points out precisely how a threat entered the network, and uses machine learning to spot abnormal user or device behavior. Review collected by and hosted on G2.com.

High cost and licensing complexity. It costs significantly more than entry-level EDR solutions and often requires additional licenses to access advanced features such as forensics or identity analytics. Review collected by and hosted on G2.com.

It is an endpoint detection and response product. It’s used by your IT department to protect you from threats and detect malicious behavior. Which is good Review collected by and hosted on G2.com.

A lot of communication emails and alot of promotional emails which are a bit annoying and the software could be a bit more user friendly than what it is now Review collected by and hosted on G2.com.

Ability to investigate and remediate security incidents. Cortex XDR protects our endpoints against advanced threats like malware, viruses and ransomware. Cortex XDR is a convenient tool for hunting advanced threats. It is a reliable tool that reduces false positives. Support and integrations with native apps and Broker VM are very simple. Review collected by and hosted on G2.com.

Cortex XDR is a well-suited solution for endpoint protection, hence I don't have any limitations to pinpoint. Review collected by and hosted on G2.com.

Its unified detection and response capability that correlates endpoint, network, and cloud telemetry for faster, more accurate threat investigation Review collected by and hosted on G2.com.

Sometimes it feels a bit heavy to manage, and the learning curve can be steeper than expected when tuning policies or customizing detections Review collected by and hosted on G2.com.

I like it's ability to dig into the niche areas of cmd and process trees to identify common used TTPs. Review collected by and hosted on G2.com.

Too many false positives, needs fine tuning or alert fatigue will be a big problem. Review collected by and hosted on G2.com.

I highlight its broad scope for detecting potential threats. Review collected by and hosted on G2.com.

The customization it offers usually requires a very manual process. Review collected by and hosted on G2.com.