Skip to main content


Download With Dependencies

The only cloud-native security platform that stops targeted social engineering and phishing attacks on cloud email platforms like Office 365 and G Suite.

GreatHorn Email Security Platform uses a defense-in-depth approach to reduce the risk of sophisticated email threats that lead to a data breach. This means, there is no single point of failure, getting organizations as close to 100% protection as possible. With seamless API integration into Microsoft 365 and Google Workspace, security teams deploy in minutes, and can immediately provide layers of protection to prevent users from falling victim to an attack. With the GreatHorn / Cortex XSOAR integration pack, organizations extend security orchestration, automation and response with native threat intelligence management across default and customizable playbooks for efficient response to security alerts and incidents.

What does this pack do?

The playbooks included in this pack help you save time and improve the response across your email security platform, keeping all systems in sync. They also help automate repetitive tasks associated with security incidents across the GreatHorn and Cortex XDR systems, including:

  • Ingest data from GreatHorn into proven playbook-driven automation to accelerate incident response
  • Improve time to detect and investigate advanced threats
  • Influence change risk types within GreatHorn to remediate actions, including message release, quarantine using similar characteristics, etc.
  • Increase and/or automate response to employee request/release messages from quarantine
  • Comprehensive customization available to build policy actions between platforms

As part of this pack, you get out-of-the-box playbooks proven to save time and improve response across enterprise organizations. All of these are easily customizable to suit the needs of your organization.

For more information, visit -




Cortex XSOARCortex XSIAM


CertificationRead more
Supported ByPartner
CreatedFebruary 9, 2021
Last ReleaseAugust 23, 2023

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.