File and folders collector

Ulkar_Hasanova — Thu, 02 Feb 2023 05:35:07 GMT

Hi community,

I have questions about setting up file and folder collector.I do not understand what the inclusion of logs of this collector gives us.How can I view all files of any formats that are in the folder?What is the vendor and product responsible for?I ask you to bring an example, in the official guide it is written very briefly

Re: File and folders collector

etugriceri — Tue, 07 Feb 2023 10:44:20 GMT

Hi Ulkar,

What this collector is gives us ?

Actually this is directly related what you want to collect and analyses. This collector might read, application logs or network device logs, OS logs etc. changes based on your scenario.

You cannot view remotely formats but you can filter remotely what you want to collect.

You can use wildcard in "Include" part. (like *.json)

Product and Vendor is generally helping for automatic parsing or keeping data in specific dataset.

If you write Vendor = X and Product = Y

Your collected data will be in X_Y_raw dataset.

I hope that helps

topic Re: File and folders collector in Cortex XDR Discussions

File and folders collector

Re: File and folders collector