topic Maximum file size for hash calculations in Cortex XDR Discussions

Maximum file size for hash calculations

maximk — Mon, 02 Dec 2024 15:03:50 GMT

What is the maximum file size for hash calculations in both XDR data and Insight Hosts files database? Thanks.

nar — Tue, 03 Dec 2024 09:40:39 GMT

Hi @maximk

Thanks for your query on LC!

Cortex XDR sends unknown samples for in-depth analysis to WildFire and WildFire also limits sample sizes to 100MB, so anything over that may not be sent or calculated.

Please refer - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/WildFire-analysis-concepts

Give it a like & mark as solution if this helped your query!

Best,

maximk — Tue, 03 Dec 2024 12:15:30 GMT

My question is not related to WildFire. The Documentations states:

The Cortex XDR agent does not include the following information in the local files inventory:

Information about files that existed on the endpoint and were deleted before the Cortex XDR agent was installed.
Information about files where the file size exceeds the maximum file size for hash calculations that are pre-configured in Cortex XDR .

I need to know what is the file size preconfigured maximum.