topic Re: Email confirmation: in Cortex XDR Discussions

Email confirmation:

M.Mustaqeem — Wed, 12 Mar 2025 09:40:09 GMT

Hello Everyone,

When we request the Palo Alto team to review or change the category of an executable that is already been tagged as 'Malware' , why don't we receive an email confirmation from the platform acknowledging the receipt or change of the case.

Thanks

Re: Email confirmation:

aspatil — Wed, 12 Mar 2025 09:46:16 GMT

Hello @M.Mustaqeem ,

Can you confirm ,how are you submitting the request?

Re: Email confirmation:

M.Mustaqeem — Thu, 13 Mar 2025 07:39:20 GMT

Hello @aspatil ,
in the Cortex Portal by going to,
Keys Assets & artifacts > Wildfire Analysis and reports > Report Verdict as Incorrect > changing the status from Malware to Benign.

Re: Email confirmation:

aspatil — Sun, 16 Mar 2025 07:41:34 GMT

Hello @M.Mustaqeem ,

If you are performing the mentioned action:
The threat team will perform further analysis of the sample to determine whether it should be reclassified. If a malware sample is determined to be safe, the signature for the file is disabled in an upcoming antivirus signature update. If a benign file is determined to be malicious, a new signature is generated. After the investigation is complete, you will receive an email describing the action that was taken.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Review-WildFire-analysis-details

If you see action was taken and you haven't receive an email, please feel free to reach out to TAC and get the explanation from Engineering.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

Regards,

Ashutosh

Re: Email confirmation:

M.Mustaqeem — Fri, 28 Mar 2025 10:25:50 GMT

Where should I contact? Could you provide me with an email address of TAC. I am unable to find it on the internet.
Thank you

Re: Email confirmation:

aspatil — Fri, 28 Mar 2025 12:10:51 GMT

https://support.paloaltonetworks.com/Support/Index

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.