https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-compromise-assessment/m-p/1230679#M8365 <P>Cortex XDR doesn't natively aggregate custom script outputs into a single Excel sheet. Please open CS ticket to explore workaround</P> Mon, 02 Jun 2025 09:01:34 GMT aspatil 2025-06-02T09:01:34Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-compromise-assessment/m-p/1229482#M8317 <P><SPAN>Hi, we recently moved to Cortex XDR, and I’m struggling to run a forensic script (such as AmCache) across 100 endpoints. I need to have all the results automatically combined into a single Excel sheet after the script finishes, similar to how Fidelis EDR handles it.</SPAN></P> Tue, 20 May 2025 06:22:20 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-compromise-assessment/m-p/1229482#M8317 N.aloufi 2025-05-20T06:22:20Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-compromise-assessment/m-p/1230679#M8365 <P>Cortex XDR doesn't natively aggregate custom script outputs into a single Excel sheet. Please open CS ticket to explore workaround</P> Mon, 02 Jun 2025 09:01:34 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-compromise-assessment/m-p/1230679#M8365 aspatil 2025-06-02T09:01:34Z