Set up Managed Threat Hunting - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Open the Cortex XSIAM tenant and approve the pairing request sent to your tenant.

1. Navigate to Notifications and locate the Request for Pairing notification.

2. Select Approve and then Yes to confirm.

   After the request is approved, Cortex XSIAM displays the Managed Threat Hunting label at the top of the page.

Configure notification emails for the impact reports and threat inquiries you want to send.

1. Select Settings → Configurations → Managed Services.

2. Enter one or more email addresses to which you want to send reports and inquires and ADD each one.

3. Save your changes.

Test the email, by going to your defined email address mailbox, and locate the Welcome to the Palo Alto Networks Cortex XSIAM Managed Threat Hunting Service email. If you did not receive the email, contact Customer Support.

(Optional) If desired, forward Managed Threat Hunting alerts to external sources such as email or slack from the Settings → Configurations → General → Notifications page.

This forwards the alert and the detailed report in a PDF format.