topic Re: Regarding running of command in Cortex XDR Discussions

Regarding running of command

Shashanksinha — Mon, 05 Dec 2022 15:31:49 GMT

Looping in queries , Hi , I want to able to query if a particular command was executed after another one . For example if sudo was executed and then another command . How do i query that ?

Re: Regarding running of command

neelrohit — Mon, 05 Dec 2022 17:10:35 GMT

Hi @Shashanksinha ,

Thank you for writing to Live Community!

Can you help more by elaborating on the used case and we would be happy to assist.

Re: Regarding running of command

Shashanksinha — Mon, 05 Dec 2022 18:16:32 GMT

I want to check through query if the user executed the sudo su command and then for example tomcat or any other command