Palo Alto Networks integrates its world-class threat intelligence arm, Unit 42 , directly into the Cortex platform.
* Contextual Enrichment: When an analyst views an incident, the "Unit 42 Intel" integration provides a
"threat card" or "intelligence insight." This goes beyond just saying a file is malicious; it tells the analyst who is likely behind the attack (e.g., Lazarus Group or APT28) and why they are attacking.
* Actor Profiles: It provides links to comprehensive research articles that describe the attacker's typical infrastructure, other common tools they use, and their historical targets. This allows the analyst to pivot from a single alert to a broader understanding of the threat actor's campaign.