Cortex XSOAR - Comply-to-Connect Demo
Channel: Josh Levine
Date: 27/07/2022

This is a demo of the Palo Alto Networks XSOAR platform being used to tie together a Palo Alto Networks Firewall, the Global Protect VPN service, the Graylog Community Edition SIEM, and Powershell to perform basic comply-to-connect enforcement.

The specific integrations used for this playbook are the Powershell Remoting and Graylog packs.

00:00 - Introduction 
00:24 - Demo Overview
02:31 - Components
05:01 - Demo Start
05:07 - XSOAR Playbook Walkthrough
05:51 - SIEM Walkthrough
06:06 - Firewall Walkthrough
07:40 - Windows 11 Endpoint Overview
08:05 - Completely Uninstalled Critical Service Demo
13:10 - Disabled Critical Service Demo