To get started with Managed Threat Hunting:
Open the Cortex XDR tenant and approve the pairing request sent to your tenant.
Navigate to Notifications and locate the Request for Pairing notification.
Select Approve and then Yes to confirm.
After the request is approved, Cortex XDR displays the Managed Threat Hunting label at the top of the page.
Configure notification emails for the impact reports and threat inquiries you want to send.
Select→ → .
Enter one or more email addresses to which you want to send reports and inquires and ADD each one.
Save your changes.
Test the email, by going to your defined email address mailbox, and locate the Welcome to the Palo Alto Networks Cortex XDR Managed Threat Hunting Service email. If you did not receive the email, contact Customer Support.
(Optional) If desired, forward Managed Threat Hunting alerts to external sources such as email or slack from the → → → page.
This forwards the alert and the detailed report in a PDF format.