https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-recognize-signer-but-not-signature/m-p/479250#M1853 <P>This looks like a bug. Can you please raise a support ticket with the screenshot and an alert dump of one alert where you're seeing this behavior? You can retrieve the alert dump by right-clicking on an alert, Retrieve Additional Data -&gt; Retrieve Alert Data.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bbarmanroy_0-1649406657702.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40099i2630D2D4E9A86F27/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="bbarmanroy_0-1649406657702.png" alt="bbarmanroy_0-1649406657702.png" /></span></P><P>&nbsp;</P> Fri, 08 Apr 2022 08:31:31 GMT bbarmanroy 2022-04-08T08:31:31Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-recognize-signer-but-not-signature/m-p/479226#M1852 <P>I have a security event, I clicked in and found that the CGO signature is unsigned, but when I create an alert exception, it recognizes the signer, why is that? The signature is not recognized, but the signer can be recognized</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="12.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40097i7FE96C4945C7E12B/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="12.png" alt="12.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="13.png" style="width: 521px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40098i5C9171F7979B1841/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="13.png" alt="13.png" /></span></P> Fri, 08 Apr 2022 07:10:24 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-recognize-signer-but-not-signature/m-p/479226#M1852 Grady 2022-04-08T07:10:24Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-recognize-signer-but-not-signature/m-p/479250#M1853 <P>This looks like a bug. Can you please raise a support ticket with the screenshot and an alert dump of one alert where you're seeing this behavior? You can retrieve the alert dump by right-clicking on an alert, Retrieve Additional Data -&gt; Retrieve Alert Data.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bbarmanroy_0-1649406657702.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40099i2630D2D4E9A86F27/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="bbarmanroy_0-1649406657702.png" alt="bbarmanroy_0-1649406657702.png" /></span></P><P>&nbsp;</P> Fri, 08 Apr 2022 08:31:31 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/can-recognize-signer-but-not-signature/m-p/479250#M1853 bbarmanroy 2022-04-08T08:31:31Z