Automatic review of Cortex XDR for Prevention Profile: Agent Settings, Malware and Exploit

[MikeDups]

Hello Together

I would like to automatically review the settings in the Cortex XDR Prevention Profile: "Agent Settings", "Malware" and "Exploit". As example that in the Agent settings, the Disk Space Quota should be set between 5000 and 2000 MB or that the Uninstall PW is Defined ...

Are there ways to automate this process? As an example, I thought of an automation process with an agent settings export function that can be compared to a Python script.

Thanks for the feedback in advance and Regards

Mike

[aspatil · Accepted solution]

Hello @MikeDups ,

Thanks for reaching out on LiveCommunity!

It's completely customer call, how do they want to automate. You can export the profile and as it encoded, you can decode it with the tool and create the app to compare.

We do have the nominated topic for the same, please refer it:

https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-cortex-xdr-view-exported-...

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".