Scripts Library

tlmarques — Mon, 22 Apr 2024 11:47:09 GMT

Hello everyone,

What types of scripts have you configured in the 'Scripts Library' of and for what purpose?

With these scripts, is it possible to create automations?
For instance, to detect if a certain computer has any software installed... if it doesn't, to enforce the installation or execution of a domain script?

Re: Scripts Library

jmazzeo — Mon, 22 Apr 2024 15:24:07 GMT

Hi @tlmarques, thanks for reaching us using the Live Community.

You can find the out of the box scripts list and the description in this documentation: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Run-Scripts-on-an-Endpoint

The main purpose of the scripts is for Incident Response, you can use them to remotely close malware processes in many endpoints at the same time if needed.

You can use them as Automation Rules actions:

Also, you can create scripts for many other use cases that can be useful for your company, like the one you mention. In the previous attached Documentation link you can find the requirements to upload custom scripts.

If this post answers your question, please mark it as the solution.

topic Scripts Library in Cortex XDR Discussions

Scripts Library

Re: Scripts Library