https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-linux-agent-what-is-the-dypd-process/m-p/447282#M1235 <P>Hello <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/65586">@KarenW</a>&nbsp;,</P><P><BR />"dypd" is the injection service used by the Cortex XDR agent.&nbsp;Documentation on the file is <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-2/cortex-xdr-agent-admin/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux.html" target="_self">here</A> while the description of how injection protects an endpoint from malware is <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/endpoint-security-concepts/analysis-and-protection-flow.html#idc8514e04-490b-498a-b9ca-b68dfc5be3d4" target="_self">here</A>.</P> Fri, 12 Nov 2021 18:44:30 GMT gjenkins 2021-11-12T18:44:30Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-linux-agent-what-is-the-dypd-process/m-p/442371#M1168 <P>What is the purpose of the dypd process?</P><P>&nbsp;</P><P>sudo /opt/traps/bin/cytool runtime query<BR />&nbsp;Name PID User Status Command<BR />pmd 32757 root Running /opt/traps/bin/pmd<BR />analyzerd 534 474 Running /opt/traps/analyzerd/analyzerd 71 73 75<BR /><STRONG>dypd 517 root Running /opt/traps/bin/dypd -s -- 66</STRONG><BR />lted 32112 474 Running /opt/traps/ltee/lted -type 2 -config ltee_decryptor.json</P> Wed, 20 Oct 2021 20:38:50 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-linux-agent-what-is-the-dypd-process/m-p/442371#M1168 KarenW 2021-10-20T20:38:50Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-linux-agent-what-is-the-dypd-process/m-p/447282#M1235 <P>Hello <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/65586">@KarenW</a>&nbsp;,</P><P><BR />"dypd" is the injection service used by the Cortex XDR agent.&nbsp;Documentation on the file is <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-2/cortex-xdr-agent-admin/cortex-xdr-agent-for-linux/use-the-cortex-xdr-agent-for-linux.html" target="_self">here</A> while the description of how injection protects an endpoint from malware is <A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/endpoint-security-concepts/analysis-and-protection-flow.html#idc8514e04-490b-498a-b9ca-b68dfc5be3d4" target="_self">here</A>.</P> Fri, 12 Nov 2021 18:44:30 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/xdr-linux-agent-what-is-the-dypd-process/m-p/447282#M1235 gjenkins 2021-11-12T18:44:30Z