This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4705 Views
  • 1 replies
  • 3 Likes

XDR Automation Rules not triggering Playbook execution

I am experiencing an issue with XDR Automation Rules when attempting to execute a script. I have configured an automation rule to trigger a Playbooks when a specific event occurs. The Playbook is designed to run the built-in Quick Action: “Run Endpoint Script”, which executes a script registered in Action Center > Scripts Library. However, th...

.522643 by • L1 Bithead
  • 1092 Views
  • 3 replies
  • 0 Likes

XDR Collector Status on Dashboard

Hi Everyone, I'm having trouble finding a way to create a widget displaying the XDR Collector status and create a custom correlation rule for a disconnected XDR Collector. I'm not able to find the correct dataset to use in the query. I used Agentic Assistant and was not able to generate the query correctly Is this feasible on Cortex XDR Pro?

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

Resolved! Malware scan report

Hello Folks We are initiating malware scan on servers using cortex XDR. We need report of all the successfully scan servers and failed along with malware found details. Fields require : Host name , IP , Scan status , Scan start and End Data , Malware found Please help me with XQL query to generate the report or any other suitable method....

Cortex XDR & Prisma Browser integration

Hi Team, We’ve just finished deploying Cortex XDR and Prisma Browser across all endpoints for a customer. I’ve seen a few blogs mentioning an integration between the two that provides enhanced security event visibility, including browser data. Has anyone implemented this integration? Is it available, and if so, how can it be set up? Regard...

Http logs collector example not working

Hihope this is the right place to ask this questionWe were given a temp user to play around with the Cortex XDR and we are trying to insert some dummy data into it.I am trying to insert data using an Http logs collector, following this guideunfortunately, the example in the guide seems to be incorrect. I created a custom collector of HTTP type a...

Resolved! Disable legacy automation rules

Hello, Currently in our xdr tenant, many issues have been getting automatically closed by legacy automation rules, rules migrated from XDR v3.x to v5,x. The problem is that these rules have conditions such as, category=Malware and detection method = XDR Agent whichr esults in legitimate security incidents being closed without analyst review. ...

Custom Scan Cortex XDR

Hello, I have a few questions regarding the Custom Scan functionality on Windows endpoints, and I have not been able to find the answers in the available documentation. First, I understand that Custom Scan has a limit of 100 items per scan. However, I have noticed some unexpected behavior when running scans: When I select only one file, the el...

Resolved! Urgent Assistance Required – Cortex XDR Performance

Hi everyone, I urgently need your help with a Cortex XDR configuration issue. We need to completely exclude specific directories from Cortex XDR activity, ensuring that the agent does not perform any scanning, analysis, injection, or other operations within those directories. Initially, we suspected that the issue was related to Exploit Pro...

tlmarques by • L4 Transporter
  • 487 Views
  • 2 replies
  • 0 Likes

Claude AI Activity and False Positive Alerts

Hello, Recently, I’ve been noticing quite a few false positive alerts related to the use of Claude AI. I’m investigating these alerts and trying to understand exactly what Claude is doing on the endpoint. I would like to review the command history and the actions performed by the application, but I cannot find enough information directly in the ...

Resolved! Cortex XDR Post-Quantum

Hi team, I would like to inquire about formal information and guidance regarding the post-quantum cryptography (PQC) strategy within the Cortex XDR ecosystem. What developments, features, or updates planned on the Cortex roadmap could you share with us? Is there currently any functionality, pilot, or integration in the console or agents that add...

Resolved! Not seeing Cortex MCP Server Download

Hi all the Cortex MCP Server download under Settings → Configurations shows on commercial tenants but is missing entirely on our FedRAMP / Federal tenant (not a permissions issue). Is it on the roadmap for Federal environments, and is there an expected timeline for rollout? Thanks!

  • 2672 Posts
  • 102 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks