Laptops dynamic group

maximk — Fri, 29 Nov 2024 14:18:04 GMT

I am looking for an efficient way to create a dynamic group for laptops only in the XDR console. So far, my only idea is to add a laptop tag during installation and then group by the tag. Is there an automated way to have XDR report the portable platform as a property that I can filter by in the console? I know how to identify laptops using XQL, but is there a way to assign a tag based on XQL results without using API commands?

Re: Laptops dynamic group

christopher356 — Sat, 30 Nov 2024 05:54:46 GMT

@maximk wrote:

I am looking for an efficient way to create a dynamic group for laptops only in the XDR console. So far, my only idea is to add a laptop tag during installation and then group by the tag. Is there an automated way to have XDR report the portable platform as a property that I can filter by in the console? I know how to identify laptops using XQL, but is there a way to assign a tag based on XQL results without using API commands?

Unfortunately, XDR doesn't currently have a built-in way to automatically identify and tag laptops based on their platform type. Manually tagging devices during installation is the most reliable method. However, you can explore using XQL queries to identify potential laptop devices based on specific criteria like device type or hardware specifications. While this might not be a fully automated solution, it can help you refine your group definitions.

topic Laptops dynamic group in Cortex XDR Discussions

Laptops dynamic group

Re: Laptops dynamic group