<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Dump alert data Analysis in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dump-alert-data-analysis/m-p/1223369#M8027</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Does anyone know how we can and how we should analyze a dump file when we do a retrieve alert data on &lt;LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;#&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;I've alerts related with memory dump, normally initiator is excel, and 99% i think the cause is excel crash or file have macros/vba inside.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;how i can check if the problem is macro/VBA??&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 10 Mar 2025 19:17:16 GMT</pubDate>
    <dc:creator>tlmarques</dc:creator>
    <dc:date>2025-03-10T19:17:16Z</dc:date>
    <item>
      <title>Dump alert data Analysis</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dump-alert-data-analysis/m-p/1223369#M8027</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Does anyone know how we can and how we should analyze a dump file when we do a retrieve alert data on &lt;LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;#&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;I've alerts related with memory dump, normally initiator is excel, and 99% i think the cause is excel crash or file have macros/vba inside.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;how i can check if the problem is macro/VBA??&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 10 Mar 2025 19:17:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dump-alert-data-analysis/m-p/1223369#M8027</guid>
      <dc:creator>tlmarques</dc:creator>
      <dc:date>2025-03-10T19:17:16Z</dc:date>
    </item>
    <item>
      <title>Re: Dump alert data Analysis</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dump-alert-data-analysis/m-p/1223426#M8030</link>
      <description>&lt;P&gt;Hello&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/307134"&gt;@tlmarques&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We use our internal tools to analyze the dump file. Hence, it would be great if you can forward the logs to TAC for analysis.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Also, regarding your concern about Excel crash, there are the common scenarios where excel crashes as we&amp;nbsp;&lt;SPAN&gt;track Office macro execution.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;TAC will provide you with Support Exception to avoid such situations .&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;If you feel this has answered your query, please let us know by clicking like and&amp;nbsp; on "mark this as a Solution". Thank you.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 11 Mar 2025 09:02:33 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/dump-alert-data-analysis/m-p/1223426#M8030</guid>
      <dc:creator>aspatil</dc:creator>
      <dc:date>2025-03-11T09:02:33Z</dc:date>
    </item>
  </channel>
</rss>

