https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cryptominers-protection-2736470759-cortex-xdr/m-p/562941#M5411 <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0px 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Hi guys</P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">We have seen a lot of false positives coming from this rule. I was wondering if you would have any guidance on how we could apply exclusion for this type of behavior? <span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:">😄</span></P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">&nbsp;</P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Thank you!</P> Tue, 24 Oct 2023 13:52:53 GMT DenisT 2023-10-24T13:52:53Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cryptominers-protection-2736470759-cortex-xdr/m-p/562941#M5411 <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0px 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Hi guys</P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">We have seen a lot of false positives coming from this rule. I was wondering if you would have any guidance on how we could apply exclusion for this type of behavior? <span class="lia-unicode-emoji" title=":grinning_face_with_smiling_eyes:">😄</span></P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">&nbsp;</P> <P class="_1qeIAgB0cPwnLhDF9XSiJM" style="margin: 0px; padding: 0.8em 0px 0.25em; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-variant-alternates: inherit; font-weight: 400; font-stretch: inherit; font-size: 14px; line-height: inherit; font-family: 'Noto Sans', Arial, sans-serif; font-optical-sizing: inherit; font-kerning: inherit; font-feature-settings: inherit; font-variation-settings: inherit; vertical-align: baseline; color: #1c1c1c; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Thank you!</P> Tue, 24 Oct 2023 13:52:53 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cryptominers-protection-2736470759-cortex-xdr/m-p/562941#M5411 DenisT 2023-10-24T13:52:53Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cryptominers-protection-2736470759-cortex-xdr/m-p/563097#M5424 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/283741">@DenisT</a>&nbsp;,</P> <P>&nbsp;</P> <P>Thank you for reaching out to Palo Alto Live Community.</P> <P>&nbsp;</P> <P>Alert exclusion can be added from:</P> <P><SPAN class="guimenuitem">Settings<SPAN>&nbsp;</SPAN></SPAN><SPAN>→&nbsp;</SPAN><SPAN class="guimenuitem">Exception Configuration</SPAN><SPAN>&nbsp;→&nbsp;</SPAN><SPAN class="guimenuitem">Alert Exclusions</SPAN><SPAN>&nbsp;page displays all the alert exclusion rules in&nbsp;</SPAN><SPAN class="phrase">Cortex XDR</SPAN><SPAN>.</SPAN></P> <P>&nbsp;</P> <P><SPAN>For more information you can refer the below document:</SPAN></P> <P><SPAN><A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Alert-Exclusions" target="_blank">https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Alert-Exclusions</A></SPAN></P> <P>&nbsp;</P> <P>Hope this helps!</P> <P>&nbsp;</P> <P>Please mark the response as "Accept as Solution" if it answers your query.</P> Wed, 25 Oct 2023 09:04:15 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cryptominers-protection-2736470759-cortex-xdr/m-p/563097#M5424 dbahuguna 2023-10-25T09:04:15Z