<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Alert Tuning and Scoping Profile in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/alert-tuning-and-scoping-profile/m-p/588605#M6783</link>
    <description>&lt;P&gt;&lt;SPAN&gt;A reply by:&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/310428"&gt;@jmazzeo&lt;/a&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Go to &lt;/SPAN&gt;&lt;STRONG&gt;Endpoints - Policy Management - Prevention -&amp;gt; Profiles&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Create a new profile:&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_0" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_4" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_5-1717430080416.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60147iB6877EDE48DC8144/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rtsedaka_5-1717430080416.png" alt="rtsedaka_5-1717430080416.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Select the right OS, and then Exceptions:&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_1" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_9-1717430258542.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60151i4371CA1DF579E045/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rtsedaka_9-1717430258542.png" alt="rtsedaka_9-1717430258542.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;You only need to set a name and a description if needed, then Create it.&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_2" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_7-1717430169161.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60149iA6CA445B99EFDF33/image-size/large?v=v2&amp;amp;px=999" role="button" title="rtsedaka_7-1717430169161.png" alt="rtsedaka_7-1717430169161.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Now, go back to&lt;STRONG&gt; Endpoints—Policy Management—Prevention -&amp;gt; Policy Rules&lt;/STRONG&gt; to edit a current policy rule&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;or create a new one.&lt;/SPAN&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Select your created Exceptions Profile, within all the other required profiles.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Select your target using the usual filters for the endpoints.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Review and apply.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_3" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_8-1717430206743.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60150i7E4CBF8A327F6EA8/image-size/large?v=v2&amp;amp;px=999" role="button" title="rtsedaka_8-1717430206743.png" alt="rtsedaka_8-1717430206743.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Verify the order and content of the rules or re-order them to assign agents with the correct policy. Then click on Save at the bottom right.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 03 Jun 2024 15:59:26 GMT</pubDate>
    <dc:creator>rtsedaka</dc:creator>
    <dc:date>2024-06-03T15:59:26Z</dc:date>
    <item>
      <title>Alert Tuning and Scoping Profile</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/alert-tuning-and-scoping-profile/m-p/588599#M6782</link>
      <description>&lt;P&gt;&lt;EM&gt;This question was asked during our Customer Success Webinar: &lt;A href="https://live.paloaltonetworks.com/t5/customer-success-webinars/cortex-xsoar-customer-success-webinar-proactive-threat-hunting/ta-p/587774" target="_blank" rel="noopener"&gt;Alert Tuning Part 2&lt;/A&gt;&lt;/EM&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Can you provide a quick example of creating a scoping profile and applying it?&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 03 Jun 2024 15:53:19 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/alert-tuning-and-scoping-profile/m-p/588599#M6782</guid>
      <dc:creator>rtsedaka</dc:creator>
      <dc:date>2024-06-03T15:53:19Z</dc:date>
    </item>
    <item>
      <title>Re: Alert Tuning and Scoping Profile</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/alert-tuning-and-scoping-profile/m-p/588605#M6783</link>
      <description>&lt;P&gt;&lt;SPAN&gt;A reply by:&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/310428"&gt;@jmazzeo&lt;/a&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Go to &lt;/SPAN&gt;&lt;STRONG&gt;Endpoints - Policy Management - Prevention -&amp;gt; Profiles&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Create a new profile:&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_0" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_4" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_5-1717430080416.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60147iB6877EDE48DC8144/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rtsedaka_5-1717430080416.png" alt="rtsedaka_5-1717430080416.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Select the right OS, and then Exceptions:&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_1" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_9-1717430258542.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60151i4371CA1DF579E045/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rtsedaka_9-1717430258542.png" alt="rtsedaka_9-1717430258542.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;You only need to set a name and a description if needed, then Create it.&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_2" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_7-1717430169161.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60149iA6CA445B99EFDF33/image-size/large?v=v2&amp;amp;px=999" role="button" title="rtsedaka_7-1717430169161.png" alt="rtsedaka_7-1717430169161.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Now, go back to&lt;STRONG&gt; Endpoints—Policy Management—Prevention -&amp;gt; Policy Rules&lt;/STRONG&gt; to edit a current policy rule&lt;/SPAN&gt;&lt;SPAN&gt;&amp;nbsp;or create a new one.&lt;/SPAN&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Select your created Exceptions Profile, within all the other required profiles.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Select your target using the usual filters for the endpoints.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Review and apply.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;DIV id="tinyMceEditor_7818d901c16739rtsedaka_3" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rtsedaka_8-1717430206743.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/60150i7E4CBF8A327F6EA8/image-size/large?v=v2&amp;amp;px=999" role="button" title="rtsedaka_8-1717430206743.png" alt="rtsedaka_8-1717430206743.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Verify the order and content of the rules or re-order them to assign agents with the correct policy. Then click on Save at the bottom right.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 03 Jun 2024 15:59:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/alert-tuning-and-scoping-profile/m-p/588605#M6783</guid>
      <dc:creator>rtsedaka</dc:creator>
      <dc:date>2024-06-03T15:59:26Z</dc:date>
    </item>
  </channel>
</rss>

