<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Pop-up Blocked Alert Not Displaying Blocked File in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/pop-up-blocked-alert-not-displaying-blocked-file/m-p/519564#M3061</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;A client received a pop-up blocked alert because a suspicious executable was found on their machine. When the client went to view more details, the executable that was blocked was never displayed in the details information. Why is that? By the way this was a post detection blocked Cortex XDR alert. I have attached a screenshot of the alert.&lt;/P&gt;&lt;BR /&gt;&lt;BR /&gt;Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.</description>
    <pubDate>Fri, 28 Oct 2022 17:40:13 GMT</pubDate>
    <dc:creator>sara.larmer</dc:creator>
    <dc:date>2022-10-28T17:40:13Z</dc:date>
    <item>
      <title>Pop-up Blocked Alert Not Displaying Blocked File</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/pop-up-blocked-alert-not-displaying-blocked-file/m-p/519564#M3061</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;A client received a pop-up blocked alert because a suspicious executable was found on their machine. When the client went to view more details, the executable that was blocked was never displayed in the details information. Why is that? By the way this was a post detection blocked Cortex XDR alert. I have attached a screenshot of the alert.&lt;/P&gt;&lt;BR /&gt;&lt;BR /&gt;Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.</description>
      <pubDate>Fri, 28 Oct 2022 17:40:13 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/pop-up-blocked-alert-not-displaying-blocked-file/m-p/519564#M3061</guid>
      <dc:creator>sara.larmer</dc:creator>
      <dc:date>2022-10-28T17:40:13Z</dc:date>
    </item>
    <item>
      <title>Re: Pop-up Blocked Alert Not Displaying Blocked File</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/pop-up-blocked-alert-not-displaying-blocked-file/m-p/519678#M3070</link>
      <description>&lt;P&gt;Hi Sara.Larmer,&lt;BR /&gt;&lt;BR /&gt;Our recommendation for &lt;A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/investigate-endpoint-alerts/manage-alerts" target="_self"&gt;alerts&lt;/A&gt; are to be investigated through the XDR management console. The alert could be a smaller part of a larger&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/investigate-incidents/cortex-xdr-incidents" target="_self"&gt;incident&lt;/A&gt;&amp;nbsp;and reviewing it from the console will provide a more holistic view of the event in question.&lt;BR /&gt;&lt;BR /&gt;Please let me know if you need any additional help.&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 31 Oct 2022 14:36:37 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/pop-up-blocked-alert-not-displaying-blocked-file/m-p/519678#M3070</guid>
      <dc:creator>mavraham</dc:creator>
      <dc:date>2022-10-31T14:36:37Z</dc:date>
    </item>
  </channel>
</rss>

