https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/poc-using-cortex-xdr-to-block-software-installations/m-p/522089#M3177 <P>-</P> <P>&nbsp;</P> Wed, 30 Nov 2022 22:37:49 GMT anlynch 2022-11-30T22:37:49Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/poc-using-cortex-xdr-to-block-software-installations/m-p/522089#M3177 <P>-</P> <P>&nbsp;</P> Wed, 30 Nov 2022 22:37:49 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/poc-using-cortex-xdr-to-block-software-installations/m-p/522089#M3177 anlynch 2022-11-30T22:37:49Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/poc-using-cortex-xdr-to-block-software-installations/m-p/522739#M3196 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/232716">@anlynch</a> ,</P> <P>You have done fantastic work with this informative and easy to understand blog post.</P> <P>I have one small remark - You were talking about <U>blocking </U>the installation, but you created a BIOC rule. Probably it is good idea to mention that BIOC will only detect the installation (because it runs in cloud console), and you want to use this BIOC to block/prevent how to convert the BIOC to Custom BTP.</P> Tue, 29 Nov 2022 13:52:40 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/poc-using-cortex-xdr-to-block-software-installations/m-p/522739#M3196 aleksandar.astardzhiev 2022-11-29T13:52:40Z