Assets -> Network configuration

Hi everyone,

  Does anyone know if the ‘range names' created in the network configuration of the assets option can be seen in the assets information, or somewhere else, of the issues or cases?

  Thanks in advance.

Regards,

J.Risquez

XQL Query

Can we fetch grouped issues by the help of XQL query. Like if same issues is running again and again in short period of time than that comes with +1 or +2 on console. So can we able to find that +1 or +2 issues which is grouped in a single issues thr

One BIOC with OR for Process name and CMD

Hi,

Please have you solution when we want to create one BIOC with two deferent process name or CMD.

EX: NAME: powershell.exe or CMD: ping

or we must split to two BIOC.

Best regards.  

XDR Allow-Listing signed processes

We have internally developed scripts that we would like to create XDR exclusions or alert level reduction for based on if they contain code signing certificates.  I don't know how to go about doing this or if it's even possible.

The idea here is to

How to find the assets that do not have XDR agent installed in new Cortex 4.x version ?

Hi,

earlier in the old Cortex 3.x version, it was easier to list out the assets that do not have Cortex XDR agent installed, from Asset Inventory (from the boolean value : Has_XDR_Agent as shown in the attachment).

Is this feature removed from the ne

Block Execution of Specific Applications Regard of version

Hi,

We want to enforce the use of only the approved version of AnyDesk (9.6.5.0 and above) on all Windows endpoints and completely prevent execution of any older versions of anydesk.exe.

Is there a clean and maintainable way to achieve this using C

Can we upgrade Cortex XDR agent version to CE version from console ?

Hello , 

Can we upgrade Cortex XDR agent version to CE version from console without any restart or downtime? 

Cortex XDR 

We are experiencing a problem, data may not be up to date. Please try again in a few minutes.

Hello All,

I've been seeing the following message on our Cortex XDR Dashboard for the past few days:

"We are experiencing a problem, data may not be up to date. Please try again in a few minutes."

There's also a link to Download support file inc

Password spraying

Hi,
Could you provide an XQL query to detect password spraying, specifically when the same IP address attempts logins on multiple AD accounts?
Thank you.

Limitations Observed with XQL Custom Widgets and Issue Visibility

Hi,

We are facing multiple limitations while creating custom widgets using XQL, which are impacting our dashboard visibility and operational efficiency. The details are outlined below:

1. Auto Refresh Limitation
   When creating a custom widget using XQL,