topic Re: Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions in General Topics

Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions

Rohita_Tewari — Fri, 01 Mar 2024 11:12:43 GMT

Hi Team,

We have added the file execution for Quickassist in restriction in XDR console but we dont want to get flooded with the alerts that are getting generated due to it. Is there any way that I could get restrict the file execution but also suppress the resulting alerts simultaneously?

Regards

Rohita

Re: Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions

BPry — Fri, 01 Mar 2024 21:16:26 GMT

@Rohita_Tewari,

What you're going to want to look into is called an alert exclusion rule.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Alert-Exclusions

Re: Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions

Rohita_Tewari — Mon, 04 Mar 2024 05:33:00 GMT

Please let me try this option out and revert. Thanks!

Regards

Rohita