topic Re: Wildcard use in CGO Process Path and Command Arguments in XDR exceptions in Integration Discussions

Wildcard use in CGO Process Path and Command Arguments in XDR exceptions

Shaveta — Mon, 06 Jun 2022 19:38:09 GMT

I need to make a exception for an alert in XDR (Version 7.6.2) and a part of the Command arguments changes each time we get the alert, is it possible to use Wildcard in it?

Re: Wildcard use in CGO Process Path and Command Arguments in XDR exceptions

MarvinC — Tue, 07 Jun 2022 23:06:13 GMT

Hi @Shaveta ,

Hope this can help you!

https://docs.paloaltonetworks.com/traps/4-2/traps-endpoint-security-manager-admin/getting-started-with-rules/wildcards-and-variables-in-policy-rules/example-using-wildcards-and-variables-in-policy-rules

Re: Wildcard use in CGO Process Path and Command Arguments in XDR exceptions

Shaveta — Thu, 09 Jun 2022 14:39:45 GMT

Thanks for the link.

We have used Wildcards in number of things and know how to use it.

I am looking to check if we can use it in CGO Process Path and Command Arguments in XDR exceptions