Lumen Technologies today announced Lumen Defender Advanced Managed Detection and Response (AMDR) for Palo Alto Networks Cortex XSIAM.
This expanded service combines Lumen’s MDR capabilities and Defender Threat Feed with Palo Alto’s Cortex XSIAM AI-driven SOC platform. The service will help enterprises modernize security operations, reduce alert fatigue and accelerate detection and response so they can identify, contain, and disrupt increasingly complex threats.
A standout feature of this solution is its deep integration of threat intelligence from Lumen’s threat research arm, Black Lotus Labs. Unlike traditional threat intelligence that relies on endpoint or log telemetry, the Black Lotus Labs Threat Feed derives insights from activity observed across the Lumen network, providing early visibility into attacker infrastructure and behavior. This network-level visibility enables detection of pre-compromise activity, such as reconnaissance or staging, before attacks reach customer environments.
Black Lotus Labs not only protects Lumen’s network and security solutions, including Lumen Defender AMDR, but also disrupts large-scale cyber campaigns targeting U.S. agencies and global enterprises, ultimately shaping the security posture of the broader market.
Unifying functions within a single platform, Lumen Defender AMDR for Palo Alto Networks Cortex XSIAM operationalizes intelligence-driven detection, investigation, and response. It is designed to reduce tool sprawl, eliminate console switching, and accelerate incident response through automation and advanced analytics. It also supports both comanaged and fully managed SOC models, enabling organizations to modernize operations without replacing existing security teams.










