https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/searchhost-exe/m-p/1207181#M7824 <P>Hi,</P> <P>&nbsp;</P> <P>Thanks for reaching LiveCommunity.</P> <P>&nbsp;</P> <P>SearchHost.exe is a legitimate Windows component, to discard any issues please check Microsoft's documentation on how to detect if this process has been compromised.</P> <P>&nbsp;</P> <P>Also, check on the alerts Cortex is giving you, check what is triggering it.</P> <P>&nbsp;</P> <P>If this post answers your inquiry, please mark it as solution.</P> Tue, 28 Jan 2025 15:39:37 GMT mavega 2025-01-28T15:39:37Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/searchhost-exe/m-p/1206031#M7823 <P>Hello Everyone,</P> <P>&nbsp;</P> <P>I am new to Cortex XDR. I wanted to ask what is searchHost.exe? and if it is safe when it generates alarm (level Medium) in Cortex XDR? If not then any recommendations?</P> <P>&nbsp;</P> <P>Thanks</P> Tue, 28 Jan 2025 09:35:00 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/searchhost-exe/m-p/1206031#M7823 M.Mustaqeem 2025-01-28T09:35:00Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/searchhost-exe/m-p/1207181#M7824 <P>Hi,</P> <P>&nbsp;</P> <P>Thanks for reaching LiveCommunity.</P> <P>&nbsp;</P> <P>SearchHost.exe is a legitimate Windows component, to discard any issues please check Microsoft's documentation on how to detect if this process has been compromised.</P> <P>&nbsp;</P> <P>Also, check on the alerts Cortex is giving you, check what is triggering it.</P> <P>&nbsp;</P> <P>If this post answers your inquiry, please mark it as solution.</P> Tue, 28 Jan 2025 15:39:37 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/searchhost-exe/m-p/1207181#M7824 mavega 2025-01-28T15:39:37Z