topic Re: API - IOCs - Backward scan in Cortex XDR Discussions

API - IOCs - Backward scan

RFeyertag — Mon, 05 Jun 2023 08:35:12 GMT

Hello dear community!

will there ever be a backwards scan functionality for API uploaded IOC's?

Rob

Re: API - IOCs - Backward scan

fmoixsante — Mon, 05 Jun 2023 11:38:26 GMT

Hi @RFeyertag,

Cortex XDR does not support retroactive scanning for IOCs added to our solution via API.

Re: API - IOCs - Backward scan

RFeyertag — Mon, 05 Jun 2023 19:40:43 GMT

Hello @fmoixsante,

that is clear, but my question is why not in the future? It is the same data, but another entry way?

Rob

Re: API - IOCs - Backward scan

fmoixsante — Mon, 05 Jun 2023 20:10:31 GMT

Hi @RFeyertag

As of now, there are no plans to add this functionality to the product. Unfortunately, we can't discuss future roadmap features either. I would suggest you contact your PAN sales team and ask them directly. They might be able to provide you with more information.

Re: API - IOCs - Backward scan

RFeyertag — Mon, 05 Jun 2023 20:26:18 GMT

@fmoixsante, thank you, I will contact them.

Rob