topic Re: Automatic review of Cortex XDR for Prevention Profile: Agent Settings, Malware and Exploit in Cortex XDR Discussions

Automatic review of Cortex XDR for Prevention Profile: Agent Settings, Malware and Exploit

MikeDups — Tue, 11 Jun 2024 07:20:25 GMT

Hello Together

I would like to automatically review the settings in the Cortex XDR Prevention Profile: "Agent Settings", "Malware" and "Exploit". As example that in the Agent settings, the Disk Space Quota should be set between 5000 and 2000 MB or that the Uninstall PW is Defined ...

Are there ways to automate this process? As an example, I thought of an automation process with an agent settings export function that can be compared to a Python script.

Thanks for the feedback in advance and Regards

Mike

Re: Automatic review of Cortex XDR for Prevention Profile: Agent Settings, Malware and Exploit

aspatil — Tue, 11 Jun 2024 10:11:50 GMT

Hello @MikeDups ,

Thanks for reaching out on LiveCommunity!

It's completely customer call, how do they want to automate. You can export the profile and as it encoded, you can decode it with the tool and create the app to compare.

We do have the nominated topic for the same, please refer it:

https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-cortex-xdr-view-exported-policy-details/ta-p/540326

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".