Skip to main content
Case studies walk through complete workflows in Palo Alto Networks Cortex XCOR, showing how teams apply multiple features together to solve real-world problems from start to finish.

​
Respond to incidents

Follow an on-call engineer through a real-world incident, from the initial page to resolution, and see how Cortex XCOR tools connect to form a complete investigation workflow. This case study covers alert triage, Cortex XCOR Differential Diagnosis (DDx), cross-telemetry correlation, noise reduction, and collaborative resolution.

Read the incident response case study

​
Protect a telemetry data budget

Follow an administrator through a single morning as they respond to an alert from a budget threshold, identify data growth, and make changes to partitions. This case study covers consumption analysis, log usage patterns, partition design, threshold and priority configuration, and data shaping.

Read the budget protection case study