Cortex XDR: Investigation and Analysis
2 full-day sessions · 9.00am–5.00pm · Central European TimeOct 22 – Oct 23, 2026German · In PersonFrankfurt (DE)
Scheduled Class
€1.190 EUR15 training credits
← Course overview
Dates & prices · Cortex XDR · XDR-A
Cortex XDR: Investigation and Analysis
Compare upcoming dates, formats and prices, then register for the class that fits.
Filter available classes
Starting From
Explore moreLive online & in person · English · EMEA
3 upcoming classes
Cortex XDR: Investigation and Analysis
4 half-day sessions · 9.30am–1.00pm · Central European TimeNov 9 – Nov 12, 2026English · Live Online
Scheduled Class
€1.190 EUR15 training credits
Cortex XDR: Investigation and Analysis
4 half-day sessions · 9.30am–1.00pm · US Central TimeDec 7 – Dec 10, 2026English · Live Online
Scheduled Class
€1.190 EUR15 training credits
Cortex XDR: Investigation and Analysis
2 full-day sessions · 9.00am–5.00pm · UK TimeDec 17 – Dec 18, 2026English · Live Online
Scheduled Class
€1.190 EUR15 training credits
No matching class
No classes match the current choices
Clear or widen the current choices to compare more dates. The training team can help if the published schedule does not fit.
Class guide
Understanding class status
Guaranteed to Run
Confirmed to run, except in unexpected force-majeure circumstances.
Guaranteed on Next Booking
The class becomes guaranteed when one more student registers.
Scheduled Class
An instructor is booked; the next class is protected by the cancel-no-more-than-once guarantee.
Fully Booked
The class is full. Join the waiting list or ask about an additional class.
Contact the training teamBefore you register
Payment methodsTraining credits · Purchase order · Bank transfer · Credit card
We accept all common payment methods in both the Euro and US Dollar as well as Palo Alto Networks training credits and vouchers for this selected training course.
Training Credits and Vouchers from Palo Alto Networks
We accept both training credits and training vouchers issued by Palo Alto Networks. To sign-up for a course and pay using training credits or vouchers, please use the Register button above. You can select training credits at the end of the registration form.
Purchase Order “PO”
If your company wants to raise a purchase order to book a training course, please sign-up using the register button above. At the end of the form, please answer the question “How would you like to pay for the course?” with “My company will pay for it, please send me an invoice with the payment details”. Our training team will then send you an official quote which your company can use to issue the PO. Our training team will also be able to provide any additional information that might be required by your accounts department.
Bank Transfer
Consigas has a bank account both in the US and in Europe. Our banks support all common bank transfer methods like IBAN/BIC, Swift, ACH or wire transfer. To sign-up for a course and pay per bank transfer, please use the Register button above.
Credit Card
We can accept credit card payment from all major credit card companies like Mastercard, VISA, American Express, Discover & Diners or Cartes Bancaires.
Training schedule formatsFull-day · Half-day
We are offering training courses both in the classical full-day as well as in a half-day format. The half-day classes are specially tailored for IT professionals who cannot afford to leave the office for several days in a row. This format allows students to attend and fully focus on the course for a couple of hours and then catch up with their day-to-day job. The training content of both schedule formats is exactly the same. The only difference is that half-day classes distribute the course over a longer period of time. Consigas is running training courses in a half-day format for many years, and we have received very positive feedback from customers. Students tell us that besides being more flexible, it also enables them to learn more effectively as it gives them more time to process all information resulting in a better understanding.
Terms and conditionsBooking · Rescheduling · Attendance · Materials · Recording · Privacy
Training Scope
The training provided will follow the details specified on our webpage or as explicitly outlined through direct communications, such as emails. We ensure our training matches these descriptions so that you get the most out of our courses.
Technology Requirements
Bring your own PC, and for those joining us virtually, stable internet and a USB headset are must-haves. Built-in mics? They’re like the free coffee in the lobby: they’ll do in a pinch, but it’s not why you’re here.
Rescheduling Policy
Life doesn’t always stick to a plan, and neither do we. If you need to reschedule your training session, just let us know at least 10 business days in advance. We’re also happy to make an exception and reschedule on shorter notice if we have sufficient participants to proceed with the class. Participant Substitution: Swap out participants anytime before the start, just make sure they haven’t logged in and accessed the training materials, as accessed coursebooks cannot be replaced. No Shows: If circumstances prevent you from attending your scheduled class and you couldn’t notify us in time, please reach out to discuss options. We’re all about second chances, although standard policy does not guarantee a refund or rescheduling in such cases. No Refunds: Please note that we do not offer refunds for booked training sessions. However, we are more than willing to apply your payment towards another course.
Schedule Changes
In the rare event that an instructor is unexpectedly unavailable, we may need to reschedule your class. If no alternate instructor is available and the new schedule doesn’t work for you, you have the option to receive a full refund.
Instructor Assignments
We aim for consistency in our training, but please note that instructor assignments may vary based on availability and are not guaranteed to be specific individuals.
Copyright and Usage of Training Materials
Our training materials are for your eyes only. You agree not to share, alter, or redistribute any training materials provided. These materials are protected by copyright and are intended solely for your personal educational use.
Recording Policy
Our training sessions may be recorded to enhance the learning experience and for future reference. We will share the video recordings with you after the training. If you prefer not to be recorded, please inform your instructor at the beginning of the training. In such cases, we will not record the session and instead provide video recordings from a previous class.
Data Protection and Privacy
At Consigas, protecting your personal information is fundamental to our business ethics. We assure you that your information is not sold, rented, or traded with other companies for marketing purposes. Our Privacy Policy outlines how we handle your personal data with transparency and care. We may share your personal information with trusted partners like Palo Alto Networks and OnFulfillment for course-related purposes, as well as with service providers who help us deliver and improve our services. These parties are strictly prohibited from using your personal data for any other purposes.
Genuine learner feedback
Students Love Our Instructors
Based on 525 course reviews
Featured learner reviews Reviews collected via Reviews.io ↗
View the complete Consigas profile on Reviews.io (opens in a new tab).
Artur Grygoruk at NTT Data
Verified via Reviews.io
Very important content, which discussed how to use Query Builder to filter logs and alerts. It was mainly focus on lab exercises. I enjoyed especially the part about blocking specific files and investigation process related mapping specific alerts to incident. Kenan explained this part very well and I will review for sure uploaded videos from EDU-262 training in order to get prepared to PCDRA exam soon in center.
Anonymous
Verified via Reviews.io
The Instructor has profound knowledge of the subject matter. His explanation was clear and organized. Hands-on practice on the lab reinforced what's learned during the course. The questions and concerns raised by the participants were addressed perfectly by the instructor.
Anonymous
Verified via Reviews.io
I have taken EDU-260 AND EDU -262 will Alin Budisan. He is a fantastic trainer and really cares about his students. He explains the material well and provides additional information, not in the training document. He also gives real-world examples from other known breaches and his real-world experiences.
I highly recommend him for all training
Ryan Aspinwall at Cypfer
Verified via Reviews.io
The lab work for this course is worth is weight in gold!
Daniel Zannoth at Indevis GmbH
Verified via Reviews.io
We've learned how to work with Incidents and Alerts, make use of the causality chain information, execute scripts remotely on an endpoint, how to use the query builder, create our own custom prevention rules and how to use them in addition to the IOC and BIOX Rules, using the network mapper and how to use create XQL Queries and visualize the results.
Michael Kujawa at Yakima Valley Farm Workers Clinic (YVFWC)
Verified via Reviews.io
It would be great if the section detailing XQL was expanded upon further, but the rest of the course was fine.
Page 1 of 2
Personal guidance
Need help choosing your XDR-A class?
Tell us what timing or format you need—we’ll help you find the best fit.