https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/a-large-number-of-port-scans/m-p/495457#M2062 <P>Hi guys!&nbsp;</P><P>&nbsp;</P><P>Recently, we often encounter incidents associated with a large number of port scans in Cortex XDR. We assume that this started after the last update. Does anyone else have something similar?</P><P>&nbsp;</P><P>Thank you!</P> Tue, 31 May 2022 13:27:48 GMT Latif 2022-05-31T13:27:48Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/a-large-number-of-port-scans/m-p/495457#M2062 <P>Hi guys!&nbsp;</P><P>&nbsp;</P><P>Recently, we often encounter incidents associated with a large number of port scans in Cortex XDR. We assume that this started after the last update. Does anyone else have something similar?</P><P>&nbsp;</P><P>Thank you!</P> Tue, 31 May 2022 13:27:48 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/a-large-number-of-port-scans/m-p/495457#M2062 Latif 2022-05-31T13:27:48Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/a-large-number-of-port-scans/m-p/495489#M2063 <P>Hello Latif,</P><P>&nbsp;</P><P>we haven't encountered any issue like that but something similar happened when we have defender on passive mode for systems on W10. As the sensor in defender checks for devices on the network , XDR terms as port scan.</P><P>&nbsp;</P><P>Hope this helps</P><P>&nbsp;</P><P>-naga</P> Tue, 31 May 2022 13:47:27 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/a-large-number-of-port-scans/m-p/495489#M2063 NagaVenkatesh 2022-05-31T13:47:27Z