topic Re: Test alerts in Cortex xdr in Cortex XDR Discussions

Test alerts in Cortex xdr

DanielMasse — Wed, 06 Apr 2022 22:04:22 GMT

Is there a built-in way to generate a test alert either from an agent installed on a client machine or through the XDR portal itself?

I currently have an agent ver 7.6.2 installed on a windows box and I'd like to create a test alert that will be visible in the portal.

Thanks.

Re: Test alerts in Cortex xdr

KanwarSingh01 — Thu, 07 Apr 2022 00:06:54 GMT

I am not aware of any built-in utility in XDR agent or cloud console but you can do the following:

There are multiple types of alerts which can be created by yourself:

Prevention
Detection
Detected (Reported)

The easiest way could be as simple as deleting shadow copies of your system where the agent is installed.

Open cmd.exe (Run as Admin)
Run Command: vssadmin delete shadows /All

Please note: The above command will delete your Shadow Copies on your endpoint and generate a BIOC detection alert.

Re: Test alerts in Cortex xdr

bbarmanroy — Thu, 07 Apr 2022 01:25:29 GMT

Hi @DanielMasse please use the Windows PE malware file found here: https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/submit-files-for-wildfire-analysis/verify-wildfire-submissions/test-a-sample-malware-file.

Once you execute the file, you'll get a notification on the agent as well as in XDR console.

Re: Test alerts in Cortex xdr

S.Pamarthi033068 — Wed, 14 May 2025 15:10:34 GMT

Hello,

i'm trying to generate a test alert in cortex xdr. i have created BIOC rule and added it to prevention profiles. i couldn't see the alert in the alert table. can you help me, what's missing.

It would be really great if you help me with this issue.

Best Regards

Sri