Palo Alto Networks, a cybersecurity solutions provider, recently announced Cortex XSIAM 2.0 to enhance its AI-driven security operations platform. This update introduces the Bring-Your-Own Machine Learning (BYOML) framework. Qusiam 2.0.Increase visibility and prioritize threats
Palo Alto Networks can now integrate personal AI into its Cortex XSIAM AI-focused security operations platform. The company processes large amounts of security data, ingesting over 5 petabytes and storing over 1 exabyte in total every day.
“XSIAM 2.0, using artificial intelligence and automation, bridges this gap by addressing operational complexity, stopping large-scale threats, and accelerating incident remediation,” says Palo Alto Networks Cortex Products said Gonen Fink, senior vice president.
Palo Alto Networks Announces Zero Trust Management Solution
Palo Alto Networks discovers new version of malware targeting Facebook accounts
AI and machine learning
XSIAM provides AI models designed for robust security analysis and threat protection. The platform also supports mature SOCs (Security Operations Centers) looking to customize and create machine learning models. The BYOML framework allows access to vast amounts of security data stored in XSIAM. This allows security teams to create and integrate ML (machine learning) models into his XSIAM for specific purposes such as fraud detection, security research, and advanced data visualization.
Previously, it took an average of 44 days for attackers to siphon data after a breach. Now it’s just a matter of a few hours. It typically takes companies about five and a half days to initially contain an incident, rendering traditional security solutions ineffective. Since its introduction, Cortex XSIAM has transformed customers’ SOCs. According to Palo Alto Networks, one service company reduced median resolution time from days to minutes. This is a 1 in 270 improvement.
The new XSIAM Command Center changes the way security teams monitor operations, providing a comprehensive view of data sources and alerts. Simplify incident identification and prioritization within a unified platform. MITER ATT&CK Coverage Dashboard allows organizations to quickly assess their defenses against various threat tactics and techniques to strengthen their security posture.