> ## Documentation Index
> Fetch the complete documentation index at: https://docs-xcor.paloaltonetworks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Case studies

> End-to-end workflow case studies demonstrating how teams use Palo Alto Networks Cortex XCOR to solve real-world problems.

Case studies walk through complete workflows in Palo Alto Networks Cortex XCOR,
showing how teams apply multiple features together to solve real-world problems from
start to finish.

## Respond to incidents

Follow an on-call engineer through a real-world incident, from the initial page to
resolution, and see how Cortex XCOR tools connect to form a complete
investigation workflow. This case study covers alert triage, Cortex XCOR Differential
Diagnosis (DDx),
cross-telemetry correlation, noise reduction, and collaborative resolution.

> **[Read the incident response case study](/overview/case-studies/respond-to-incidents.md)**

## Protect a telemetry data budget

Follow an administrator through a single morning as they respond to an alert from a
budget threshold, identify data growth, and make changes to partitions. This case
study covers consumption analysis, log usage patterns, partition design, threshold
and priority configuration, and data shaping.

> **[Read the budget protection case study](/overview/case-studies/manage-budgets.md)**


## Related topics

- [Case study: responding to incidents](/overview/case-studies/respond-to-incidents.md)
- [Case study: protecting a telemetry data budget](/overview/case-studies/manage-budgets.md)
- [Manage telemetry data budgets](/overview/guides/manage-budgets.md)
- [Palo Alto Networks Cortex XCOR](/overview.md)
- [HTTP API collector source plugin](/ingest/pipeline/plugins/source-plugins/http-collector.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.