https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/query-regarding-malware-scan/m-p/524233#M3264 <P>During initiating the malware scan on connected endpoints suppose the system moves to disconnected state for few days and the scan status starts showing in progress now. Could you please let us know the duration of the malware scan is applicable for such endpoints?&nbsp;</P> Thu, 15 Dec 2022 15:26:05 GMT Shashanksinha 2022-12-15T15:26:05Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/query-regarding-malware-scan/m-p/524233#M3264 <P>During initiating the malware scan on connected endpoints suppose the system moves to disconnected state for few days and the scan status starts showing in progress now. Could you please let us know the duration of the malware scan is applicable for such endpoints?&nbsp;</P> Thu, 15 Dec 2022 15:26:05 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/query-regarding-malware-scan/m-p/524233#M3264 Shashanksinha 2022-12-15T15:26:05Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/query-regarding-malware-scan/m-p/524551#M3276 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/203123">@Shashanksinha</a>,<BR /><BR />Thank you for writing to Live Community!<BR /><BR /></P> <P><SPAN>The XDR agent has a memory of 24 hours to detect that there was a scan going on. It will resume scanning if the agent goes back online within 24 hours period from the time it went down. If not, the scan is errored out and it will continue in the next scan.<BR /><BR />Hope this helps!</SPAN></P> Tue, 20 Dec 2022 08:09:27 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/query-regarding-malware-scan/m-p/524551#M3276 mavraham 2022-12-20T08:09:27Z