topic How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion? in Cortex XDR Discussions

How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

J.Muencharern — Mon, 09 Dec 2024 09:43:44 GMT

Hi Members,

Please advise. How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

Thanks & regards,

Jirapan M.

Re: How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

nsinghvirk — Wed, 25 Dec 2024 15:04:37 GMT

Hello @J.Muencharern ,

Thanks for reaching out on LiveCommunity.

Can you please clarify your use case? Are you looking for a way to not generate alert but in background you want XDR to provide protection and log activity?

Re: How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

J.Muencharern — Fri, 10 Jan 2025 07:23:36 GMT

Hello Nsinghvirk,

I would like to get alert and log from Cortex XDR when it was detected on the suspicious file and don't want blocked the suspicious files.The action is notification.

Thanks & regards,