topic Re: Events That Cortex XDR is Logging in Cortex XDR Discussions

Events That Cortex XDR is Logging

mkuhelj — Wed, 20 Sep 2023 12:02:03 GMT

Hi everyone,

Does anyone have a list or any reference to a document where I can see which logs Cortex XDR is gathering from a Windows endpoint? For example, to clearly know, that XDR is gathering all file event types, process creations, gathering event IDs (based on which one are enabled), etc.

Thank you.

Re: Events That Cortex XDR is Logging

aspatil — Wed, 20 Sep 2023 14:37:32 GMT

Hello,

You can find the required information in below article:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Endpoint-Data-Collection

Let me know if it helps!