CINXE.COM

<!doctype html> <html lang="en-US" class="no-touch js "> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1">  <meta name="blogsPostDate" content="2024-08-05 05:00:38"/><meta name="blogsPostTags" content="black-hat,cisco-xdr,xdr"/><meta name="blogsPostCat" content="Security"/><meta name="article:category" content="Security"/> <meta name="wordCount" content="1109" /> <meta name="readTime" content="266" />  <script type='text/javascript' src="//www.cisco.com/etc/designs/cdc/clientlibs/responsive/js/web-component-foundation.min.js"></script> <script> /** * Invokes appropriate private methods based on input parameters based on needs of web component architecture * @param {Array} wcAssets array of strings that correlate to the names of web components or array of objects containing asset name and corresponding locale/path * @param {String} localePath specifies where web component should be retrieved from (expected format: en/us or en_au for all other locales); false if wcAssets, is array of objects * @param {Boolean} isWem [Optional] specifies if assets are being loaded on a WEM environment * @param {Boolean} needTargetter [Optional] specifies need for targetter bundle to be loaded (generally needed on external sites) * @param {Boolean} isRelative [Optional] specifies if asset path(s) should be relative * @param {String} env [Optional] specifies enviornment to append to relative path (should not be used with isRelative) * @param {Boolean} hasEnvOverride [Optional] specifies if environment needs to be overridden (should be used with env) */ cdc.wcAncillaryAssetAllocator.init(['cdc-template-blogs'], 'en/us', false, true, false, 'prod'); if (window.cdc === undefined) { window.cdc = {}; } if (cdc.cdcMasthead === undefined) { cdc.cdcMasthead = {}; } if (cdc.cdcMasthead.additional === undefined) { cdc.cdcMasthead.additional = {}; } cdc.cdcMasthead.additional.env = 'prod'; </script> <script type="text/javascript"> if ( typeof cdc === "undefined")cdc = {}; if ( typeof cdc.util === "undefined")cdc.util = {}; cdc.util.ensureNamespace = function (namespaceStr) { if (!namespaceStr) { return; var parts = namespaceStr.split("."); var o = window; var i; var aPart; for (i = 0; i < parts.length; i++) aPart = parts[i]; if (typeof (o[aPart]) != "object"){ o[aPart] = {}; } o = o[aPart]; } }; cdc.dm = {}; cdc.dm.util = {}; cdc.dm.util.ensureNamespace = cdc.util.ensureNamespace; </script> <meta name="author" content="AJ Shipley" /><meta name="blogsPostAuthor" content="AJ Shipley" /><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' /> <script type="text/javascript" src="//www.cisco.com/c/dam/cdc/t/ctm-core.js"></script>  <title>Cisco XDR: Open Ecosystem Accelerated at Black Hat Events - Cisco Blogs</title> <meta name="description" content="Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with “competitors” to have the open ecosystem of today." /> <link rel="canonical" href="https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events" /> <meta property="og:locale" content="en_US" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Cisco XDR: Open Ecosystem Accelerated at Black Hat Events" /> <meta property="og:description" content="Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with “competitors” to have the open ecosystem of today." /> <meta property="og:url" content="https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events" /> <meta property="og:site_name" content="Cisco Blogs" /> <meta property="article:published_time" content="2024-08-05T12:00:38+00:00" /> <meta property="article:modified_time" content="2024-08-05T16:08:03+00:00" /> <meta property="og:image" content="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/Cisco-XDR-Dashboard.png" /> <meta property="og:image:width" content="2872" /> <meta property="og:image:height" content="1456" /> <meta property="og:image:type" content="image/png" /> <meta name="author" content="AJ Shipley" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:creator" content="@aric_shipley" /> <meta name="twitter:label1" content="Written by" /> <meta name="twitter:data1" content="AJ Shipley" /> <meta name="twitter:label2" content="Est. reading time" /> <meta name="twitter:data2" content="6 minutes" /> <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#article","isPartOf":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events"},"author":{"name":"AJ Shipley","@id":"https://blogs.cisco.com/#/schema/person/4a7a8cdb28fa702f5af8d3606c0e2564"},"headline":"Cisco XDR: Open Ecosystem Accelerated at Black Hat Events","datePublished":"2024-08-05T12:00:38+00:00","dateModified":"2024-08-05T16:08:03+00:00","mainEntityOfPage":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events"},"wordCount":1143,"publisher":{"@id":"https://blogs.cisco.com/#organization"},"image":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#primaryimage"},"thumbnailUrl":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/Cisco-XDR-Dashboard.png","keywords":["Black Hat","Cisco XDR","Extended Detection and Response (XDR)"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events","url":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events","name":"Cisco XDR: Open Ecosystem Accelerated at Black Hat Events - Cisco Blogs","isPartOf":{"@id":"https://blogs.cisco.com/#website"},"primaryImageOfPage":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#primaryimage"},"image":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#primaryimage"},"thumbnailUrl":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/Cisco-XDR-Dashboard.png","datePublished":"2024-08-05T12:00:38+00:00","dateModified":"2024-08-05T16:08:03+00:00","description":"Cisco XDR turns one year old. Here is the backstory of how we developed relationships and alliances with “competitors” to have the open ecosystem of today.","breadcrumb":{"@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#primaryimage","url":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/Cisco-XDR-Dashboard.png","contentUrl":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/Cisco-XDR-Dashboard.png","width":2872,"height":1456},{"@type":"BreadcrumbList","@id":"https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Cisco Blogs","item":"https://blogs.cisco.com/"},{"@type":"ListItem","position":2,"name":"Security","item":"https://blogs.cisco.com/security"},{"@type":"ListItem","position":3,"name":"Cisco XDR: Open Ecosystem Accelerated at Black Hat Events"}]},{"@type":"WebSite","@id":"https://blogs.cisco.com/#website","url":"https://blogs.cisco.com/","name":"Cisco Blogs","description":"","publisher":{"@id":"https://blogs.cisco.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://blogs.cisco.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://blogs.cisco.com/#organization","name":"Cisco Systems","url":"https://blogs.cisco.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://blogs.cisco.com/#/schema/logo/image/","url":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2020/10/Cisco_Logo_no_TM_Sky_Blue-RGB.png","contentUrl":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2020/10/Cisco_Logo_no_TM_Sky_Blue-RGB.png","width":912,"height":482,"caption":"Cisco Systems"},"image":{"@id":"https://blogs.cisco.com/#/schema/logo/image/"}},{"@type":"Person","@id":"https://blogs.cisco.com/#/schema/person/4a7a8cdb28fa702f5af8d3606c0e2564","name":"AJ Shipley","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://blogs.cisco.com/#/schema/person/image/","url":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2022/03/AJ-Shipley.jpeg","contentUrl":"https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2022/03/AJ-Shipley.jpeg","caption":"AJ Shipley"},"description":"AJ is responsible for Cisco’s technical support, professional services and managed services for security and collaboration products. Prior to Cisco, he was Vice President of Product Management for Palo Alto Networks and has worked for Net App, Wind River and Raytheon. He holds undergraduate and graduate degrees in Electrical Engineering and Computer Science and an MBA from The University of North Carolina.","sameAs":["https://www.linkedin.com/in/aj-shipley-1146679/","https://twitter.com/aric_shipley"],"url":"https://blogs.cisco.com/author/ashipley"}]}</script>  <link rel='dns-prefetch' href='//www.cisco.com' /> <link rel='dns-prefetch' href='//s.w.org' /> <link rel="alternate" type="application/rss+xml" title="Cisco Blogs » Feed" href="https://blogs.cisco.com/feed" /> <link rel="alternate" type="application/rss+xml" title="Cisco Blogs » Comments Feed" href="https://blogs.cisco.com/comments/feed" /> <script type="text/javascript"> window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/blogs.cisco.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=5.9.2"}}; /*! This file is auto-generated */ !function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([10084,65039,8205,55357,56613],[10084,65039,8203,55357,56613])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings); </script> <style type="text/css"> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 0.07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; } </style> <link rel='stylesheet' id='wp-block-library-css' href='https://blogs.cisco.com/wp-includes/css/dist/block-library/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='wp-components-css' href='https://blogs.cisco.com/wp-includes/css/dist/components/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='wp-block-editor-css' href='https://blogs.cisco.com/wp-includes/css/dist/block-editor/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='wp-nux-css' href='https://blogs.cisco.com/wp-includes/css/dist/nux/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='wp-reusable-blocks-css' href='https://blogs.cisco.com/wp-includes/css/dist/reusable-blocks/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='wp-editor-css' href='https://blogs.cisco.com/wp-includes/css/dist/editor/style.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='mux_video_block_style-css' href='https://blogs.cisco.com/wp-content/plugins/ilab-media-tools/public/blocks/mediacloud-mux.blocks.style.css' type='text/css' media='all' /> <style id='global-styles-inline-css' type='text/css'> body{--wp--preset--color--black: #000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--cisco-midnight-blue: #0d274d;--wp--preset--color--cisco-ocean-blue: #1e4471;--wp--preset--color--cisco-sky-blue: #00bceb;--wp--preset--color--cisco-green: #6abf4b;--wp--preset--color--cisco-orange: #fbab18;--wp--preset--color--cisco-red: #e2231a;--wp--preset--color--dark-gray: #495057;--wp--preset--color--medium-gray: #9e9ea2;--wp--preset--color--light-gray: #ced4da;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--duotone--dark-grayscale: url('#wp-duotone-dark-grayscale');--wp--preset--duotone--grayscale: url('#wp-duotone-grayscale');--wp--preset--duotone--purple-yellow: url('#wp-duotone-purple-yellow');--wp--preset--duotone--blue-red: url('#wp-duotone-blue-red');--wp--preset--duotone--midnight: url('#wp-duotone-midnight');--wp--preset--duotone--magenta-yellow: url('#wp-duotone-magenta-yellow');--wp--preset--duotone--purple-green: url('#wp-duotone-purple-green');--wp--preset--duotone--blue-orange: url('#wp-duotone-blue-orange');--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} </style> <link rel='stylesheet' id='category-css-css' href='https://blogs.cisco.com/wp-content/plugins/cisco-category-page-enhancement/css/category-css.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='multiauthor_custom_front_style-css' href='https://blogs.cisco.com/wp-content/plugins/cisco-multiple-authors/css/multiauthor.css?ver=1.1' type='text/css' media='all' /> <link rel='stylesheet' id='parent-style-css' href='https://blogs.cisco.com/wp-content/themes/ciscowordpress/style.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='child-style-css' href='https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/style.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='ciscowordpress-style-css' href='https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/style.css?ver=5.9.2' type='text/css' media='all' /> <style id='ciscowordpress-style-inline-css' type='text/css'> @media only screen and (min-width: 930px){ ul#featured_categories li{ width: calc(100%/ ); }} </style> <link rel='stylesheet' id='cui-standard-css' href='https://www.cisco.com/web/fw/cisco-ui/1.3.5/dist/css/cui-standard.min.css?ver=5.9.2' type='text/css' media='all' /> <link rel='stylesheet' id='style_login_widget-css' href='https://blogs.cisco.com/wp-content/plugins/miniorange-oauth-oidc-single-sign-on/resources/css/style_login_widget.css?ver=5.9.2' type='text/css' media='all' /> <script type='text/javascript' src='https://blogs.cisco.com/wp-content/plugins/cisco-multiple-authors/js/custom-multiauthor.js?ver=5.9.2' id='multiauthor_custom_js-js'></script> <script type='text/javascript' src='https://blogs.cisco.com/wp-content/themes/ciscowordpress/js/card-dropdown.js?ver=5.9.2' id='ciscowordpress-card-tag-dropdown-js'></script> <link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://blogs.cisco.com/xmlrpc.php?rsd" /> <link rel="wlwmanifest" type="application/wlwmanifest+xml" href="https://blogs.cisco.com/wp-includes/wlwmanifest.xml" /> <meta name="generator" content="WordPress 5.9.2" /> <link rel='shortlink' href='https://blogs.cisco.com/?p=460414' /> <link rel="alternate" type="application/json+oembed" href="https://blogs.cisco.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fblogs.cisco.com%2Fsecurity%2Fcisco-xdr-open-ecosystem-accelerated-at-black-hat-events" /> <link rel="alternate" type="text/xml+oembed" href="https://blogs.cisco.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fblogs.cisco.com%2Fsecurity%2Fcisco-xdr-open-ecosystem-accelerated-at-black-hat-events&format=xml" /> <link rel="icon" href="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/09/cropped-Cisco-logo-thumb-sky-blue-32x32.jpg" sizes="32x32" /> <link rel="icon" href="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/09/cropped-Cisco-logo-thumb-sky-blue-192x192.jpg" sizes="192x192" /> <link rel="apple-touch-icon" href="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/09/cropped-Cisco-logo-thumb-sky-blue-180x180.jpg" /> <meta name="msapplication-TileImage" content="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/09/cropped-Cisco-logo-thumb-sky-blue-270x270.jpg" /> </head> <body class="post-template-default single single-post postid-460414 single-format-standard no-sidebar"> <div id="page" class="site"> <cdc-template-micro lang="en" search-set-context="blogs"> <a class="skip-link screen-reader-text" href="#content">Skip to content</a> <header id="masthead" class="site-header"> </header> <div id="content" class="site-content"> <div id="primary" class="content-area"> <main id="main" class="site-main"> <p id="breadcrumbs"><span><span><a href="https://blogs.cisco.com/">Cisco Blogs</a> / <span><a href="https://blogs.cisco.com/security">Security</a> / <span class="breadcrumb_last" aria-current="page">Cisco XDR: Open Ecosystem Accelerated at Black Hat Events</span></span></span></span></p> <div class="blog-post-header"> </div> <article id="post-460414" class="post-460414 post type-post status-publish format-standard has-post-thumbnail hentry category-security tag-black-hat tag-cisco-xdr tag-xdr"> <div class="main-content"> <header class="entry-header"> <div class="entry-meta"> August 5, 2024 <a id="post-comments" href="https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events#respond">Leave a Comment</a> <hr> </div> </header> <div class="blog-post-header"> <div class="thumbnail-avatar"> <div class="post-thumbnail" style="background-image:url(https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/08/IL20240805155658-Cisco-XDR-Dashboard-600x200.png);"> <img src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2022/03/IL20220311175913-AJ-Shipley-150x150.jpeg" width="102" height="102" alt="Avatar" class="avatar avatar-102 wp-user-avatar wp-user-avatar-102 photo avatar-default"> </div> </div> <div class="blog-cat-post-author-container"> <a href=https://blogs.cisco.com/security><h5>Security</h5></a> <h1 class="entry-title">Cisco XDR: Open Ecosystem Accelerated at Black Hat Events</h1><p class="wordcount"><span class="black">4 min read</span></p> <p> <a href="https://blogs.cisco.com/author/ashipley" title="Posts by AJ Shipley" rel="author">AJ Shipley</a> </p> </div> </div>  <div class="entry-content"> <h2><span style="color: #6abf4b;"><strong>Cisco XDR is an Open Platform</strong></span></h2> <p><a href="https://www.cisco.com/site/us/en/products/security/xdr/index.html">Cisco XDR</a> turns <a href="https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2023/m08/cisco-transforms-crisis-to-control-with-new-automated-ransomware-recovery.html">one year old</a> this week, and it is a good time to share the backstory of how we developed relationships and alliances with “competitors” to have the open ecosystem of today.</p> <p>The story begins in the <a href="https://www.blackhat.com/us-24/noc.html">Black Hat Network Operations Center,</a> which provides a high security, high availability network in one of the most demanding environments in the world – the Black Hat event. This is accomplished with the help of best of breed solutions providers and seasoned security and engineering teams led by Black Hat’s NOC Team Leads. The Security Operations Center is within the NOC.</p> <figure id="attachment_460415" aria-describedby="caption-attachment-460415" style="width: 640px" class="wp-caption aligncenter"><img class="wp-image-460415 size-medium_large" src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsedrcftvgfvtcdrx-768x434.jpg" alt="" width="640" height="362" srcset="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsedrcftvgfvtcdrx-768x434.jpg 768w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsedrcftvgfvtcdrx-300x170.jpg 300w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsedrcftvgfvtcdrx-1024x579.jpg 1024w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsedrcftvgfvtcdrx.jpg 1430w" sizes="(max-width: 640px) 100vw, 640px" /><figcaption id="caption-attachment-460415" class="wp-caption-text">Cisco XDR at the Black Hat USA 2023 NOC/SOC</figcaption></figure> <p>This is our eighth year supporting <a href="https://www.blackhat.com/us-24/">Black Hat USA</a>. Cisco is the Official Mobile Device Management, Malware Analysis and DNS (Domain Name Service) Provider. We work with other official providers to bring the hardware, software and engineers to build and secure the network, for our joint customer Black Hat: Arista, Corelight, Lumen, NetWitness and Palo Alto Networks.</p> <p>The NOC Team Leads allow Cisco (and the other NOC partners) to bring in additional software to make our internal work more efficient and have greater visibility; however, Cisco is not the official provider for Extended Detection & Response, Network Detection & Response or Collaboration. The Cisco team brings the Breach Protection Suite, including:</p> <ul> <li>Cisco XDR: Threat Hunting / Threat Intelligence Enrichment / Executive dashboards / Automation with Webex</li> <li>Cisco XDR Analytics (Formerly Secure Cloud Analytics / Stealthwatch Cloud): network traffic visibility and threat detection</li> </ul> <figure id="attachment_460416" aria-describedby="caption-attachment-460416" style="width: 640px" class="wp-caption aligncenter"><img loading="lazy" class="wp-image-460416 size-medium_large" src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedrcftvgybhunj-768x433.png" alt="" width="640" height="361" srcset="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedrcftvgybhunj-768x433.png 768w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedrcftvgybhunj-300x169.png 300w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedrcftvgybhunj-1024x577.png 1024w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedrcftvgybhunj.png 1430w" sizes="(max-width: 640px) 100vw, 640px" /><figcaption id="caption-attachment-460416" class="wp-caption-text">Integrations at Black Hat Asia SOC in the NOC, to be implemented at Black Hat USA 2024</figcaption></figure> <h2><span style="color: #6abf4b;"><strong>It Started at Black Hat</strong></span></h2> <p>While working side-by-side with the Palo Alto Networks engineers year after year deployed to Singapore, London and Las Vegas, we developed trust and the desire to work closer together and build more integrations between the products in the NOC/SOC. A reporter with <em>The Register</em> toured the Black Hat USA 2023 NOC and <a href="https://www.theregister.com/2023/08/12/black_hat_network/">wrote an article</a> about this close collaboration between partners. The working relationship with Palo Alto Networks opened doors with Check Point and Fortinet, as we publicly demonstrated our commitment to cooperation in the SOC.</p> <p>The Black Hat experiences expanded into building the <a href="https://blogs.cisco.com/security/operationalizing-our-custom-soc-in-a-box-at-the-rsa-conference-2024">RSA Conference SOC</a>. During his keynote at RSAC 2022, Cisco Security Executive VP and GM Jeetu Patel stated, <em>“We all know this is a hypercompetitive industry. But beating competitors is nowhere near as important as stopping the bad actors. Collectively, we can work together to defeat our real adversaries.</em>” We implement this challenge everyday with Cisco XDR.</p> <figure id="attachment_460417" aria-describedby="caption-attachment-460417" style="width: 640px" class="wp-caption aligncenter"><img loading="lazy" class="wp-image-460417 size-medium_large" src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedcrftvgbyvftcdr-768x579.jpg" alt="" width="640" height="483" srcset="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedcrftvgbyvftcdr-768x579.jpg 768w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedcrftvgbyvftcdr-300x226.jpg 300w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedcrftvgbyvftcdr-1024x772.jpg 1024w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/sxedcrftvgbyvftcdr.jpg 1430w" sizes="(max-width: 640px) 100vw, 640px" /><figcaption id="caption-attachment-460417" class="wp-caption-text">Tour at the RSAC 2024 Security Operations Center</figcaption></figure> <p>We took our experiences at Black Hat and RSAC SOC to the National Football League SOC for the <a href="https://blogs.cisco.com/security/to-win-against-cyber-attackers-at-super-bowl-lviii-the-nfl-turns-to-cisco-xdr">Super Bowl</a> and <a href="https://blogs.cisco.com/sports-media-entertainment/cisco-blocks-and-tackles-threats-to-protect-nfl-in-2023">Draft</a>. Protecting these large events required cooperation with companies such as Microsoft and CrowdStrike, now two of the most robust integration partners with Cisco XDR. We took those skills and technology integrations to Paris, actively protecting the <a href="https://www.cisco.com/c/m/fr_fr/official-partner-paris-2024.html">Paris 2024 Games</a> today.</p> <p>We engaged other industry leaders, including SentinelOne, Trend Micro, Cybereason, Darktrace and Proofpoint; building relationships and integrations with Cisco XDR.</p> <h2><span style="color: #6abf4b;"><strong>New Palo Alto Networks (and other) Integrations</strong></span></h2> <p>From proof-of-concept connections at Black Hat, we took these ideas and built them into the XDR product. The most recent additions include Cisco Meraki MX, Cisco Umbrella DNS detections and now Palo Alto Networks firewall.</p> <p>Recent and upcoming third-party integration additions include:</p> <ul> <li>Detections and Incident Generation <ul> <li>Palo Alto Cortex-enabled Next-Generation Firewall</li> <li>Microsoft Defender for Office 365</li> <li>Proofpoint Threat Protection</li> </ul> </li> <li>Threat Investigation <ul> <li>Palo Alto Cortex-enabled Next-Generation Firewall</li> <li>Check Point Quantum</li> <li>Microsoft Defender for Office 365</li> </ul> </li> <li>Workflows <ul> <li>Palo Alto Networks Panorama – Add IP, Domain, or URL to Group or Category <ul> <li>This workflow appears in the pivot menu and allows you to add a URL, IP, or domain name to a group or category in Palo Alto Networks Panorama.</li> </ul> </li> <li>Jira Cloud, Xmatters, ZenDesk <ul> <li>These workflows allow SOCs/NOCs to collaborate more effectively using the team collaboration tools they already have</li> </ul> </li> <li>Elastic <ul> <li>Integrations with SIEMs and data storage apps allow for long-term retention of incident history for compliance and policy purposes</li> </ul> </li> </ul> </li> <li>Asset Insights <ul> <li>Microsoft Azure Cloud</li> </ul> </li> <li>Automated Ransomware Recovery <ul> <li>Rubrik Security Cloud</li> </ul> </li> </ul> <h2><span style="color: #6abf4b;"><strong>New Integration Opportunities</strong></span></h2> <p>Cisco Partners can publish their own integrations in the Cisco XDR Integrations “Exchange”, with our new Verified Integrations Program. Some of the first integrations brought to XDR by participants in this program are:</p> <ul> <li><strong>Threat Investigation </strong> <ul> <li>Red Sift Pulse</li> <li>Bastille Networks</li> <li>Radware Cloud WAF Service</li> <li>Radware Cloud DDoS Protection Service</li> <li>Signal Sciences Next-Gen WAF</li> </ul> </li> </ul> <ul> <li><strong>Workflows</strong> <ul> <li>Radware Cloud DDoS Protection Service</li> <li>Rubrik Security Cloud</li> </ul> </li> </ul> <p>If you have a product that you want to make Cisco XDR compatible, email our <a href="https://www.cisco.com/c/en/us/products/security/technical-alliance-partners.html">Cisco Security Technical Alliance</a> at partnering-csta@cisco.com</p> <h2><span style="color: #6abf4b;"><strong>Check Out the NOC and SOC Dashboards at Black Hat</strong></span></h2> <p>While you are at Black Hat USA, plan to visit the Cisco Booth, 7-8 August, where you can speak with one of the engineers from the Black Hat SOC inside the Network Operations Center and check out the Cisco XDR and ThousandEyes dashboards up close.</p> <figure id="attachment_460418" aria-describedby="caption-attachment-460418" style="width: 640px" class="wp-caption aligncenter"><img loading="lazy" class="wp-image-460418 size-medium_large" src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsxdrcftvgybhbgyvftcdrxse-768x389.png" alt="" width="640" height="324" srcset="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsxdrcftvgybhbgyvftcdrxse-768x389.png 768w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsxdrcftvgybhbgyvftcdrxse-300x152.png 300w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsxdrcftvgybhbgyvftcdrxse-1024x518.png 1024w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xsxdrcftvgybhbgyvftcdrxse.png 1430w" sizes="(max-width: 640px) 100vw, 640px" /><figcaption id="caption-attachment-460418" class="wp-caption-text">Cisco XDR Dashboard – Black Hat USA 2023</figcaption></figure> <p>You can also attend a scheduled NOC Presentation to learn more about the technology partners who come together to build and protect the Black Hat network:</p> <ul> <li>Wednesday, August 7: <ul> <li>10:20 AM – 10:50 AM in Lagoon G, Level 2</li> <li>4:45 PM – 5:35 PM in Business Hall Theater E</li> </ul> </li> <li>Thursday, August 8: <ul> <li>10:20 AM – 10:50 AM in Lagoon G, Level 2</li> <li>2:35 PM – 3:25 PM in Business Hall Theater E</li> </ul> </li> </ul> <p>Be sure to attend the 10th Annual <a href="https://www.blackhat.com/us-24/briefings/schedule/index.html#the-th-annual-black-hat-usa-network-operations-center-noc-report-41013">Black Hat USA Network Operations Center (NOC) Report</a>, afternoon of Thursday, August 8, 3:20pm-4:00pm (Oceanside A, Level 2).</p> <figure id="attachment_460419" aria-describedby="caption-attachment-460419" style="width: 640px" class="wp-caption aligncenter"><img loading="lazy" class="wp-image-460419 size-medium_large" src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xdrcftvgybhgyvftcdrxse-768x434.jpg" alt="" width="640" height="362" srcset="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xdrcftvgybhgyvftcdrxse-768x434.jpg 768w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xdrcftvgybhgyvftcdrxse-300x170.jpg 300w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xdrcftvgybhgyvftcdrxse-1024x579.jpg 1024w, https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2024/07/xdrcftvgybhgyvftcdrxse.jpg 1430w" sizes="(max-width: 640px) 100vw, 640px" /><figcaption id="caption-attachment-460419" class="wp-caption-text">The 9th Annual Black Hat USA NOC Report 2023</figcaption></figure> <p>We are excited for the 2<sup>nd</sup> year of Cisco XDR innovation, accelerating the evolution of the <a href="https://blogs.cisco.com/security/cisco-splunk-a-complete-soc-platform-purpose-built-for-the-ai-driven-future">SOC of the Future</a>. We will continue to build upon the lessons learned and relationships developed at Black Hat events globally.</p> <h2><span style="color: #6abf4b;"><strong>About Black Hat</strong></span></h2> <p>Black Hat is the cybersecurity industry’s most established and in-depth security event series. Founded in 1997, these annual, multi-day events provide attendees with the latest in cybersecurity research, development, and trends. Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more. As the event series where all career levels and academic disciplines convene to collaborate, network, and discuss the cybersecurity topics that matter most to them, attendees can find Black Hat events in the United States, Canada, Europe, Middle East and Africa, and Asia. For more information, please visit <a href="http://www.blackhat.com" target="_blank" rel="noopener">www.blackhat.com</a>.</p> <p> </p> <hr /> <p style="text-align: center;"><em>We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Security on social!</em></p> <p style="text-align: center;"><strong>Cisco Security Social Channels</strong></p> <p style="text-align: center;"><strong><a href="https://www.instagram.com/CiscoSecure/" target="_blank" rel="noopener noreferrer">Instagram</a></strong><br /> <strong><a href="https://www.facebook.com/ciscosecure/" target="_blank" rel="noopener noreferrer">Facebook</a></strong><br /> <strong><a href="https://twitter.com/CiscoSecure" target="_blank" rel="noopener noreferrer">Twitter</a></strong><br /> <strong><a href="https://www.linkedin.com/showcase/cisco-secure" target="_blank" rel="noopener noreferrer">LinkedIn</a></strong></p> <div id="share_bar_desktop"> <span class = "share_title">Share</span> <div class="twitter"> <div class = "box"> <a class = "share" href="https://twitter.com/intent/tweet?url=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events&text=Cisco XDR: Open Ecosystem Accelerated at Black Hat Events&via=ciscosecure" target='_blank' data-config-metrics-group='social_shares' data-config-metrics-title='twitter_shares' data-config-metrics-item='twitter_share'> <img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_X_white.svg" alt="share on twitter"></a> </div> </div> <div class="facebook"> <div class = "box"> <a class = "share" href = "http://www.facebook.com/sharer/sharer.php?u=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events&title=Cisco XDR: Open Ecosystem Accelerated at Black Hat Events" data-config-metrics-group='social_shares' data-config-metrics-title='facebook_shares' data-config-metrics-item='facebook_share' onclick="javascript:window.open(this.href, '', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_fb_white.svg" alt="share on facebook"></a> </div> </div> <div class="linkedin"> <div class = "box"> <a class = "share" href = "https://www.linkedin.com/cws/share?url=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events" data-title=" " data-config-metrics-group='social_shares' data-config-metrics-title='linkedin_shares' data-config-metrics-item='linkedin_share' onclick="javascript:window.open(this.href, '', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_li_white.svg" alt="share on linkedin"></a> </div> </div> <div class = "mail"> <div class = "box"> <a class="share" href="mailto:?subject=Cisco Blog: Cisco XDR: Open Ecosystem Accelerated at Black Hat Events&body=I saw this post on Cisco Blogs and thought you might like to read it.%0A%0ACisco XDR: Open Ecosystem Accelerated at Black Hat Events%0A%0Ahttps://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events%0A%0A****Disclaimer****%0A%0ACisco is not responsible for the content of this email, and its contents do not necessarily reflect Cisco’s views or opinions. Cisco has not verified the email address or name of the sender." data-config-metrics-group='social_shares' data-config-metrics-title='email_shares' data-config-metrics-item='email_share'> <img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_email_white.svg"> </a> </div> </div> <div class = "clear"></div> </div> <br> <div class = "share_text">Share:</div> <div id="share_bar_mobile"> <div class="twitter"> <div class = "box"> <a class = "share" href="https://twitter.com/intent/tweet?url=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events&text=Cisco XDR: Open Ecosystem Accelerated at Black Hat Events&via=ciscosecure" target='_blank' data-config-metrics-group='social_shares' data-config-metrics-title='twitter_shares' data-config-metrics-item='twitter_share'> <img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_X_white.svg" alt="share on twitter"></a> </div> </div> <div class="facebook"> <div class = "box"> <a class = "share" href = "http://www.facebook.com/sharer/sharer.php?u=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events&title=Cisco XDR: Open Ecosystem Accelerated at Black Hat Events" data-config-metrics-group='social_shares' data-config-metrics-title='facebook_shares' data-config-metrics-item='facebook_share' onclick="javascript:window.open(this.href, '', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_fb_white.svg" alt="share on facebook"></a> </div> </div> <div class="linkedin"> <div class = "box"> <a class = "share" href = "https://www.linkedin.com/cws/share?url=https://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events" data-title=" " data-config-metrics-group='social_shares' data-config-metrics-title='linkedin_shares' data-config-metrics-item='linkedin_share' onclick="javascript:window.open(this.href, '', 'menubar=no,toolbar=no,resizable=yes,scrollbars=yes,height=600,width=600');return false;"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_li_white.svg" alt="share on linkedin"></a> </div> </div> <div class = "mail"> <div class = "box"> <a class="share" href="mailto:?subject=Cisco Blog: Cisco XDR: Open Ecosystem Accelerated at Black Hat Events&body=I saw this post on Cisco Blogs and thought you might like to read it.%0A%0ACisco XDR: Open Ecosystem Accelerated at Black Hat Events%0A%0Ahttps://blogs.cisco.com/security/cisco-xdr-open-ecosystem-accelerated-at-black-hat-events%0A%0A****Disclaimer****%0A%0ACisco is not responsible for the content of this email, and its contents do not necessarily reflect Cisco’s views or opinions. Cisco has not verified the email address or name of the sender." data-config-metrics-group='social_shares' data-config-metrics-title='email_shares' data-config-metrics-item='email_share'> <img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_email_white.svg"> </a> </div> </div> <div class = "clear"></div> </div> <br> </div> <div class="author-section"> <div><h2>Authors</h2></div> <div class="auth-row"> <div class="blog-row author-bio"> <div class="item-thirds-1 author-bio-box" > <div class="author-image" > <a href="https://blogs.cisco.com/author/ashipley"><img src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2022/03/IL20220311175913-AJ-Shipley-150x150.jpeg" width="150" height="150" alt="Avatar" class="avatar avatar-150wp-user-avatar wp-user-avatar-150 alignnone photo avatar-default"> </a> </div> <div class="author-info"> <h3><a href="https://blogs.cisco.com/author/ashipley"> AJ Shipley</a> </h3> <h4 class="title">Vice President </h4> <h4>Product Management - Threat, Detection & Response</h4> <a href="https://twitter.com/aric_shipley" rel="nofollow" target="_blank"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_X_navy.svg" alt="share on facebook"></a><a href="https://www.linkedin.com/in/aj-shipley-1146679/" rel="nofollow" target="_blank"><img class="share_image" src="https://blogs.cisco.com/wp-content/themes/ciscowordpress-child/svg/share_li_navy.svg" alt="share on facebook"></a> </div> </div> </div> </div> </div> <footer class="entry-footer"> </footer> </article> <div id="tags-container">Tags: <a href="https://blogs.cisco.com/tag/black-hat" rel="tag">Black Hat</a> <a href="https://blogs.cisco.com/tag/cisco-xdr" rel="tag">Cisco XDR</a> <a href="https://blogs.cisco.com/tag/xdr" rel="tag">Extended Detection and Response (XDR)</a> <hr id="comment-break-line"> </div> </main> </div> <div class="blog-row cui cta"> <div class="item-halves-1"> <div class="cta-container"> <div class="cta-image"> <img src="https://storage.googleapis.com/blogs-images-new/ciscoblogs/1/2023/07/IL20230719143932-Cybersecurity-Expert-graphic-marquee-3-scaled-150x150.jpg"> </div>  <div class="cta-description"> <h2>Cisco Cybersecurity Viewpoints</h2> <p>Where security insights and innovation meet. Read the e-book, see the video, dive into the infographic and more...</p> <div class="btn--parent"> <button class="btn--primary1" onclick="window.location.href = 'https://www.cisco.com/c/m/en_us/products/security/cybersecurity-viewpoints.html?CCID=cc000160&OID=otrsc031293&DTID=oblgcdc000651';">  Get expert perspectives now </button> </div>  </div>    </div>  </div>  <div class="item-halves-2"> <div class="cta-container"> <div class="cta-image"> <img src="https://alln-extcloud-storage.cisco.com/Cisco_Blogs:blogs/1/2020/01/IL20200117171458-Screen-Shot-2020-01-17-at-12.13.39-PM-150x150.png"> </div>  <div class="cta-description"> <h2>Why Cisco Security?</h2> <p>Explore our Products & Services</p> <div class="btn--parent"> <button class="btn--primary1" onclick="window.location.href = 'https://www.cisco.com/c/en/us/products/security/index.html';">  Learn More </button> </div>  </div>    </div>  </div>  </div> </div>  <div id="social-footer" class="blog-row"> <ul class="social-footer-item item-full"> <h5> CONNECT WITH US </h5> <ul id="social-icons-list"> <li> <a href="https://www.linkedin.com/company/cisco/" target="_blank" rel=”noopener noreferrer” tabindex="0" alt="Go to Cisco's LinkedIn"><svg width="32" height="32" viewBox="0 0 32 32" role="img" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><path d="m24.80382,24.53603l-3.70694,0l0,-5.62559c0,-1.34209 -0.02431,-3.06801 -1.92709,-3.06801c-1.92986,0 -2.22361,1.46262 -2.22361,2.97171l0,5.72189l-3.70347,0l0,-11.56902l3.55417,0l0,1.58181l0.05069,0c0.49445,-0.90976 1.70486,-1.86868 3.50903,-1.86868c3.75347,0 4.44722,2.39528 4.44722,5.51111l0,6.34478zm-15.74236,-13.1495c-1.19097,0 -2.15139,-0.934 -2.15139,-2.08552c0,-1.15084 0.96042,-2.08485 2.15139,-2.08485c1.18611,0 2.14931,0.93401 2.14931,2.08485c0,1.15152 -0.9632,2.08552 -2.14931,2.08552l0,0zm1.85486,13.1495l0,-11.56902l-3.71111,0l0,11.56902l3.71111,0zm15.73403,-20.65724l-21.30556,0c-1.01736,0 -1.84444,0.78249 -1.84444,1.74815l0,20.74545c0,0.96499 0.82708,1.74882 1.84444,1.74882l21.30556,0c1.02014,0 1.84931,-0.78383 1.84931,-1.74882l0,-20.74545c0,-0.96566 -0.82917,-1.74815 -1.84931,-1.74815l0,0z" fill="#fff" fill-rule="evenodd"></path></svg></a></li> <li> <a href="https://twitter.com/ciscosecure" target="_blank" rel=”noopener noreferrer” tabindex="0" alt="Go to Cisco's Twitter"><svg width="32" height="32" viewBox="0 0 32 32" role="img" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <path d="M25.2019 2H30.1087L19.3887 13.8605L32 30H22.1254L14.3913 20.2115L5.54174 30H0.631901L12.0981 17.3138L0 2H10.1252L17.1162 10.9471L25.2019 2ZM23.4797 27.1569H26.1987L8.64785 4.69374H5.73013L23.4797 27.1569Z" fill="#fff"/> </svg></a></li> <li> <a href="https://www.facebook.com/cisco/" target="_blank" rel=”noopener noreferrer” tabindex="0" alt="Go to Cisco's Facebook"><svg width="32" height="32" viewBox="0 0 32 32" role="img" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><path d="m26.62006,4l-22.2403,0c-0.7622,0 -1.37976,0.59894 -1.37976,1.33804l0,21.56635c0,0.73891 0.61756,1.33803 1.37976,1.33803l11.97343,0l0,-9.38796l-3.25793,0l0,-3.65868l3.25793,0l0,-2.69815c0,-3.13113 1.97213,-4.83613 4.85266,-4.83613c1.37975,0 2.56571,0.09955 2.91135,0.14415l0,3.2722l-1.99788,0.00091c-1.56654,0 -1.86993,0.72183 -1.86993,1.7812l0,2.33582l3.7362,0l-0.48652,3.65868l-3.24968,0l0,9.38796l6.37067,0c0.76191,0 1.37975,-0.59912 1.37975,-1.33803l0,-21.56635c0,-0.7391 -0.61784,-1.33804 -1.37975,-1.33804" fill="#fff"></path></svg></a></li> <li> <a href="https://www.instagram.com/cisco/?hl=en" target="_blank" rel=”noopener noreferrer” tabindex="0" alt= "Go to Cisco's Instagram"><svg width="32" height="32" viewBox="0 0 32 32" role="img" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g fill="#fff"><path d="m22.23823,2.07724l-12.4768,0c-4.23706,0 -7.68419,3.44729 -7.68419,7.68435l0,12.4768c0,4.23723 3.44713,7.68436 7.68419,7.68436l12.4768,0c4.23739,0 7.68452,-3.4473 7.68452,-7.68436l0,-12.4768c0.00016,-4.23706 -3.44713,-7.68435 -7.68452,-7.68435zm5.21409,20.16115c0,2.87494 -2.33899,5.21377 -5.21393,5.21377l-12.47696,0c-2.87478,0.00016 -5.2136,-2.33883 -5.2136,-5.21377l0,-12.4768c0,-2.87477 2.33882,-5.21376 5.2136,-5.21376l12.4768,0c2.87494,0 5.21393,2.33899 5.21393,5.21376l0,12.4768l0.00016,0z"></path><path d="m15.99999,8.82524c-3.9564,0 -7.17508,3.21868 -7.17508,7.17508c0,3.95624 3.21868,7.17476 7.17508,7.17476c3.9564,0 7.17509,-3.21852 7.17509,-7.17476c0,-3.9564 -3.21869,-7.17508 -7.17509,-7.17508zm0,11.87908c-2.59395,0 -4.70449,-2.11021 -4.70449,-4.70416c0,-2.59412 2.11038,-4.7045 4.70449,-4.7045c2.59412,0 4.7045,2.11038 4.7045,4.7045c0,2.59395 -2.11054,4.70416 -4.7045,4.70416z"></path><path d="m23.47599,6.73035c-0.476,0 -0.9436,0.1927 -1.27976,0.53035c-0.33781,0.336 -0.532,0.80376 -0.532,1.28141c0,0.47617 0.19435,0.94377 0.532,1.28141c0.336,0.336 0.80376,0.53036 1.27976,0.53036c0.47765,0 0.94377,-0.19436 1.28141,-0.53036c0.33765,-0.33764 0.53036,-0.80541 0.53036,-1.28141c0,-0.47765 -0.19271,-0.94541 -0.53036,-1.28141c-0.336,-0.33765 -0.80376,-0.53035 -1.28141,-0.53035z"></path></g></svg></a></li> <li> <a href="https://www.youtube.com/user/Cisco/welcome" target="_blank" rel=”noopener noreferrer” tabindex="0" alt="Go to Cisco's Youtube"><svg width="32" height="32" viewBox="0 0 32 32" role="img" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><path d="m12.73901,19.93335l-0.00144,-8.54172l8.47104,4.28574l-8.4696,4.25598zm18.59878,-10.02146c0,0 -0.30631,-2.09493 -1.24635,-3.01746c-1.19214,-1.21081 -2.52842,-1.21682 -3.14122,-1.28769c-4.38704,-0.30753 -10.96784,-0.30753 -10.96784,-0.30753l-0.01363,0c0,0 -6.58064,0 -10.96784,0.30753c-0.61283,0.07087 -1.94862,0.07688 -3.14119,1.28769c-0.93998,0.92253 -1.24586,3.01746 -1.24586,3.01746c0,0 -0.31352,2.46013 -0.31352,4.92024l0,2.30635c0,2.46008 0.31352,4.92018 0.31352,4.92018c0,0 0.30588,2.09496 1.24586,3.01749c1.19257,1.21085 2.7591,1.17254 3.45682,1.29945c2.50808,0.23321 10.65906,0.30539 10.65906,0.30539c0,0 6.58758,-0.00962 10.97462,-0.31712c0.6128,-0.07089 1.94908,-0.07687 3.14122,-1.28772c0.94004,-0.92253 1.24635,-3.01749 1.24635,-3.01749c0,0 0.31306,-2.4601 0.31306,-4.92018l0,-2.30635c0,-2.46011 -0.31306,-4.92024 -0.31306,-4.92024l0,0z" fill="#fff"></path></svg></a></li> </ul> </ul> </div>  </cdc-template-micro>  </div> <script type="text/javascript" src="//www.cisco.com/c/dam/cdc/t/ctm.js"></script> <script> function convert_to_url(obj) { return Object .keys(obj) .map(k => `${encodeURIComponent(k)}=${encodeURIComponent(obj[k])}`) .join('&'); } function pass_to_backend() { if(window.location.hash) { var hash = window.location.hash; var elements = {}; hash.split("#")[1].split("&").forEach(element => { var vars = element.split("="); elements[vars[0]] = vars[1]; }); if(("access_token" in elements) || ("id_token" in elements) || ("token" in elements)) { if(window.location.href.indexOf("?") !== -1) { window.location = (window.location.href.split("?")[0] + window.location.hash).split('#')[0] + "?" + convert_to_url(elements); } else { window.location = window.location.href.split('#')[0] + "?" + convert_to_url(elements); } } } } pass_to_backend(); </script> <script type='text/javascript' src='https://blogs.cisco.com/wp-content/themes/ciscowordpress/js/navigation.js?ver=20151215' id='ciscowordpress-navigation-js'></script> <script type='text/javascript' src='https://blogs.cisco.com/wp-content/themes/ciscowordpress/js/skip-link-focus-fix.js?ver=20151215' id='ciscowordpress-skip-link-focus-fix-js'></script> </body> </html>