topic Re: Cortex XDR Pro Malwarescan with partial success in Action center in Cortex XDR Discussions

Cortex XDR Pro Malwarescan with partial success in Action center

RFeyertag — Wed, 28 Sep 2022 14:32:58 GMT

Hello dear community,

is there any explanation why the malware scan ends up with partial success? Is there any log where we can find the answer?

https://live.paloaltonetworks.com/t5/general-topics/scan-completes-with-partial-success/m-p/509603#M106089

Rob

Re: Cortex XDR Pro Malwarescan with partial success in Action center

neelrohit — Wed, 28 Sep 2022 15:56:16 GMT

Hi @RFeyertag ,

Thank you for writing to Live Community!

This situation occurs in circumstances where there are certain applications,processes, files or executables which are running during the malware scan and those processes cannot be scanned during runtime. This results in some files/executables where scan is skipped and hence it shows the output as scanned with partial success.

The remediation is to reboot the endpoints to terminate any running processes which reject scanning during runtime and then the scan should complete successfully. This is generally observed on some applications(eg. like database applications when they are running DB queries or writing new queries to the disk) which cannot afford examination and intrusive examination during runtime and hence Dynamic Security testing fails on them.

Hope that answers your question.

Re: Cortex XDR Pro Malwarescan with partial success in Action center

RFeyertag — Thu, 29 Sep 2022 10:34:46 GMT

Hello Neelrohit!

thank you for your explanation.

Can we see which files or applications were skipped etc. in a log?

Rob