topic Re: Malware Profile - Ransomware Protection in Cortex XDR Discussions

Malware Profile - Ransomware Protection

BoonHwee — Mon, 10 Apr 2023 03:35:22 GMT

Hello community, does anyone have more information pertaining to Ransomware Protection (Protection Mode) between "Aggressive" vs "Normal"?

From what I understand is that aggressive mode will have decoy files being created on the local machine.

Re: Malware Profile - Ransomware Protection

mavraham — Mon, 10 Apr 2023 17:16:55 GMT

Hi @BoonHwee, thank you for writing to Live Community.

The difference between aggressive and normal mode is that additional applications benign applications will be exposed to Cortex XDR agent decoy files. While in normal mode, XDR will not interfere with benign applications or end user activity.

You can find more information here.

Re: Malware Profile - Ransomware Protection

BoonHwee — Tue, 11 Apr 2023 02:54:37 GMT

Hi @mavraham , Thank You for your reply. I understand the difference, but I would like to know what the benefits is between the 2? I had look through the documents, but it is only stating what you had mentioned.