Palo Alto Networks

Cortex XDR Triumphs in 2022 MITRE ATT&CK Evaluations


Delivering 100% prevention and
100% detection across all 19 evaluation steps

Watch on-demand webinar Read the ebook results

2022 MITRE Engenuity ATT&CK Evaluations

white triangle

Key Takeaways

The MITRE Enterprise 2022 Evaluations evaluated 30 different security solutions against two of the world's most active and sophisticated threat groups (Wizard Spider and Sandworm), simulating their real-world attack progressions. By re-creating these types of attacks based on true events, customers can understand how the different solutions address real-world threats.

For the second year in a row, Cortex XDR® emerged with 100% prevention in the evaluation.

Here are the highlights of how Cortex XDR performed against the TTPs emulated from Wizard Spider and Sandworm:

  • Blocked 100% of attacks in the protection evaluation on both Windows® and Linux endpoints.

  • 100% detection of all 19 attack steps.

  • Over 98% of attack substeps were identified with “technique level analytics detections.”

  • Over 98% visibility of all adversarial activity across both attack scenarios.



Unit 42 Shines in 2022 MITRE Engenuity ATT&CKEvaluations for Managed Services


Delivering what matters without the noise.

Read the blog

Resources for All Things MITRE

Palo Alto Networks Garners Stellar Results, Four Years Running

Deciding on an XDR or EDR solution or a Managed Service and need proof of consistent excellence with stellar performance, year after year? MITRE Evaluations provide objective third-party technical evaluations. See the detailed results of each test from the last four years, and understand whether you are getting the security coverage you need.

Watch the video

2022 MITRE Engenuity ATT&CK Evaluations

  • Watch the video
Register for our on-demand webinar

Demystifying the 2022 MITRE ATT&CK Evaluations

  • On-demand webinar
Register for our on-demand webinar

2022 MITRE Engenuity ATT&CK Evaluations

  • Read blog
Read blog

2022 MITRE Engenuity ATT&CK Evaluations Managed Services

  • Read blog
Read Round 4 guide

The Essential Guide to MITRE ATT&CK Round 4

  • Read Round 4 e-book
Read Round 3 guide

The Essential Guide to MITRE Round 3 Evaluations

  • Read Round 3 e-book

Cortex XDR: The Market Approves!

For more information on our third-party security evaluation results, analyst perspectives and customer reviews, see our industry validation page for Cortex XDR.

Request a demo

Get your copy now!

By submitting this form, you agree to our Terms. View our Privacy Statement.
round1 mitre guide 1 round1 mitre guide 2

Your guide is ready for download!

We hope you find this guide insightful as you work towards your EDR evaluation.

Download the guide
demo center

Demo Center

If you enjoy this content, check out our Demo Center.

Webinar

Webinar

We have more than 600 recorded webinars you can view at your leisure.

expert overview

Our experts are standing by

If you want a report, video, white paper or something else, we have it.

Get the latest news, invites to events, and threat alerts

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Statement and Terms of Use.

Products and Services
  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Observability
  • Cortex XCOR
  • Next-Generation Identity Security
  • Privileged Access Management
  • Identity and Access Management
  • Endpoint Privilege Manager
  • Identity Governance
  • Workforce Password Management
  • Agentic Identities
  • Secrets Management
  • Unified Secrets Governance
  • Application Credentials Delivery
  • Vendor Privileged Access
  • Threat Intel and Incident Response Services
  • Prepare for Emerging Risks
  • Strengthen Your Defenses
  • Build Your Security Strategy
  • Understand the Adversary
  • Respond to a Cyber Attack
Company
  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom
Popular Links
  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
Palo Alto Networks Logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2026 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language