Palo Alto XSOAR

Palo Alto Cortex XSOARaccelerates incident response by unifying alerts, incidents, and indicators from any source on a single platform for lightning- quick search, query, and investigation.

With this integration, users can contextualize existing alerts, filter false-positives, identify compromised devices, and track emerging threats.

• Query an IP to determine if it is Internet-Background Noise• Query an IP to determine if it is a Benign Service
• Query the GreyNoise data set for common trends by looking for CVEs, paths, ports or fingerprints
• Pull stats from the GreyNoise data set for threat hunting and identifying emerging threats
• Calculate the severity of the incident using GreyNoise IP reputation data