XDR Malware scan

Shahwaz_Md — Wed, 14 Aug 2024 05:33:48 GMT

Hi All,

We have a middle team that manages the end users and we are planning to give them the process of scanning the endpoints however if an end user initiates a scan we are not getting the event on ACTION CENTRE which makes it difficult to track from our end.

If we give them the access to console what is least rights they would require to perform this action.

Regards,

Shahwaz

Re: XDR Malware scan

nsinghvirk — Fri, 16 Aug 2024 17:21:41 GMT

Hello @Shahwaz_Md

Thanks for reaching out on LiveCommunity!

You can create a custom role from access management. In which you can choose which ever rights you want to assign to it from "components" section. Only for endpoint scanning right, You need to go to Endpoints -> Endpoints Administration -> Select View/Edit option -> Then simply check the Endpoint scan box as shown in screenshot.

Additionally you can scope these users to specific endpoint group using SBAC.

Please click Accept as Solution to acknowledge that the answer to your question has been provided.

topic XDR Malware scan in Cortex XDR Discussions

XDR Malware scan

Re: XDR Malware scan