Unifying detection and response: Sysdig + Cortex XSOAR for security at cloud speed

This document explains how integrating Sysdig with Palo Alto Networks Cortex XSOAR accelerates incident response across cloud, container, and host environments by unifying runtime detections, enriching context, and automating actions such as killing or pausing containers, quarantining files, and triggering system captures. It presents direct and SIEM-mediated integration patterns, details supported response commands and a sample system-capture playbook with human-in-the-loop approvals, provides high-level configuration steps, and illustrates an example workflow for responding to crypto-miner detections.