User activity

JaisonVargas — Thu, 04 May 2023 22:42:40 GMT

Hello,

I used Cortex XDR for Endpoint Security, but I would like to know if XDR can identify and report user activity and time spent on it.

Thanks.

Re: User activity

mavraham — Sun, 07 May 2023 23:29:57 GMT

Hi @JaisonVargas,

Thank you for writing to Live Community. Would you be able to elaborate on which activates you are looking to track? You can create BIOC rules to receive alerts about certain type of suspicious behaviors related to files (read, write, create etc), injections ,process and others.

You cannot however track time spent on certain apps if I understand you correctly.

topic Re: User activity in Cortex XDR Discussions

User activity

Re: User activity