topic Re: Scripts/ Download File size limit in Cortex XDR Discussions

Scripts/ Download File size limit

joffrin.alexander — Wed, 20 May 2020 20:22:15 GMT

I am trying to get a live memory dump from the Endpoints with Cortex XDR agents installed. through a live terminal and the the file explorer, we are limited to 200 MB downloads from the remote host. Is there a way to expand this file size limit or how are others getting live memory dumps from their endpoints with cortex XDR installed? (No XSOAR available)

am I limited in file size if i were to write a python script and add it to the scripts library in the action center to retreive a live memory dump?

Re: Scripts/ Download File size limit

dfalcon — Wed, 03 Jun 2020 05:11:46 GMT

Hi @joffrin.alexander-

You are correct, the max file size is 200 MB. (https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/response-actions/initiate-a-live-terminal-session)

Please give me a day or so. I will check with Product Management to see if they have any suggestions.

Re: Scripts/ Download File size limit

dfalcon — Wed, 03 Jun 2020 16:26:34 GMT

Hi @joffrin.alexander-

After some checking, the limit for scripts is higher than 200 MB. The PM I spoke to believes it is 500 MB.