topic Cortex Prevention Profiles in Cortex XDR Discussions

Cortex Prevention Profiles

H.Patri — Thu, 28 Aug 2025 06:33:35 GMT

Hi Team,

Customers found a few of the security modules disabled by default and they wish to enable the modules.
- Below are the modules that the customer wishes to enable for the endpoints.
“Agent Certificates”, “Data Generation Providers”, “PowerShell Script Files”, “On-Write File Examination”, and "VB Script modules".
- We have provided the customer with some of the information regarding the above-mentioned modules.
- Customers want to know the impact of enabling the above-mentioned modules.

Re: Cortex Prevention Profiles

eluis — Tue, 02 Sep 2025 11:42:10 GMT

Hi @H.Patri

The impact of enabling security modules is that those endpoints will be protected.

So some apps blocks can occur if they are found malicious/suspicious

The impact is as in any other security product you/customer install

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis