topic Re: Blocking executions without showing any alerts in Cortex XDR Discussions

Blocking executions without showing any alerts

Shashanksinha — Wed, 13 Jul 2022 08:47:48 GMT

Hello , is there any way in cortex XDR to block executions without whitelisting/blocking the hash/file path and not get

any incident or alert and at the same time.

Re: Blocking executions without showing any alerts

bbarmanroy — Wed, 13 Jul 2022 09:32:42 GMT

Hi @Shashanksinha what is the use case that you're trying to achieve? It'd be ideal to get notified if a certain flagged binary is executed on endpoint fleet for action owners to perform appropriate investigation, containment and remedial actions.