Palo Alto Networks Cybersecurity Academy
The Problem
200
Alerts in Queue
90 min
Per Alert
300 hrs
Total Work Needed
8 hrs
Hours in a Workday
300 hours of work. 8 hours available. Most alerts NEVER get investigated.
Meet XSIAM
👤 Manual Investigation
🔍 Search email system
5 min
📄 Analyze email
10 min
📁 Search proxy logs
5 min
🔒 Search auth logs
5 min
📈 Cross-reference data
15 min
🤔 Make decision
5 min
✅ Take action
5 min
📝 Document
15 min
TOTAL TIME
~65+ minutes
🤖 XSIAM Automated
📨 Alert received
instant
🔗 Auto-correlate data
2 sec
🧠 AI risk scoring
1 sec
📖 Playbook recommendation
instant
🚫 Auto-block malicious IP
1 sec
🔑 Auto-reset password
1 sec
📩 Auto-quarantine email
1 sec
📋 Auto-generate report
2 sec
TOTAL TIME
~8 seconds
Speed Comparison
Manual
4+ hours
→ 6,000x FASTER →
XSIAM
2.3 sec
Inside the XSIAM Command Center
👉 Click on each element below to learn what it does. The Command Center shows how security data flows from sensors through AI processing to actionable alerts.
🎯 Exploration Progress - Click all 5 elements to continue
☐ Data Sources
☐ Raw Alerts
☐ AI/ML Engine
☐ Incidents
☐ Response Paths
P
Cortex XSIAM - Command Center
Dashboard
Incidents
Alerts
Playbooks
12.4K
Endpoints
FW
Firewall
EM
Email Gateway
CL
Cloud Services
EP
Endpoints
ID
Identity
+18
More Sources
2,847
RAW ALERTS
2,847
→
178
AI/ML CORRELATION
94% Consolidated
178
INCIDENTS
165
AUTOMATED
13
MANUAL
What Humans Still Do
Complex Investigations
The interesting cases that require human creativity and intuition.
When something doesn't fit the pattern, humans figure it out.
Threat Hunting
Proactively looking for attackers instead of just waiting for alerts.
Finding threats before they cause damage.
Strategy & Planning
Deciding what to protect and how. Building security architectures
and making decisions that affect the whole organization.
Training AI
Teaching systems like XSIAM to be even smarter. Fine-tuning
automation rules and improving detection accuracy.
What People Do Now
⬇ Scroll down to explore all career paths ⬇
Four kinds of work that stay with people:
Click any two career cards to see what the work is
SOC Analyst → Automation Engineer
Builds and checks the playbooks agents run
SOC Analyst → Threat Hunter
Looks for attackers the agents have not flagged yet
SOC Analyst → AI/ML Security Specialist
Trains and tests the models agents consult
SOC Analyst → Security Architect
Decides what the agents may and may not do
Your First Certification:
🏅
Cybersecurity Apprentice
Palo Alto Networks Certified Cybersecurity Apprentice
Perfect for beginners! This entry-level exam tests your knowledge across six areas:
- Cybersecurity basics - threats, malware, firewalls
- Network fundamentals - how data travels
- Network security - protecting connections
- Endpoint security - securing devices
- Cloud security - protecting cloud services
- Security operations - SOC roles & SIEM/SOAR tools
Palo Alto Networks Cybersecurity Academy
Be the XSIAM
⬇ Scroll to play the game ⬇
Drag each issue to the response the playbook would run.
📨 Phishing Email Detected
🔒 Credential Theft Alert
🕷 Malware Download
🚫 Suspicious IP Connection
📩 Quarantine Email
🔑 Reset Password
💻 Isolate Endpoint
🚫 Block IP Address
Palo Alto Networks Cybersecurity Academy
Final Knowledge Check
⬇ Scroll to answer questions ⬇
Palo Alto Networks Cybersecurity Academy
🏆
XSIAM Champion
Gold Level Certificate - Series Complete
Your Name
🔎 SOC Explorer
⚡ Incident Responder
🏆 XSIAM Champion
⬇ Scroll to download certificate ⬇
🎉 Congratulations, Champion!
You now understand:
How Security Operations Centers work
How to investigate cybersecurity incidents
The tools SOC analysts use every day
How XSIAM turns issues into cases
Which steps AI agents run, and which step a person approves
What people do when agents run the routine steps
Want to go through the training again?
Palo Alto Networks Cybersecurity Academy