09-04-2022 12:25 AM
Hello dear community,
Are these drivers, signers, etc. blocked by CORTEX XDR Pro?
it is a copy of the official provided list from Microsoft.
Is there a official statement or ressource from PA for bad drivers, etc. which makes me sleep bether?
BR
Rob
09-04-2022 02:30 AM
Hello @Cyber1985 ,
Thank you for reaching out on Live Community!
Cortex XDR looks looks upon behaviour of execution and driver loading and dropping activity. For any malicious activity, it will be blocked under Behavioural Threat Protection module rules and heuristics.
We additionally also rely on sources of vulnerable drivers, one of the most prominent one that can be shared is from microsoft drivers block rules list:
Hope that answers your question.
Regards.
09-04-2022 02:30 AM
Hello @Cyber1985 ,
Thank you for reaching out on Live Community!
Cortex XDR looks looks upon behaviour of execution and driver loading and dropping activity. For any malicious activity, it will be blocked under Behavioural Threat Protection module rules and heuristics.
We additionally also rely on sources of vulnerable drivers, one of the most prominent one that can be shared is from microsoft drivers block rules list:
Hope that answers your question.
Regards.
09-17-2022 12:32 AM
Exactly this was the answer, I expected!
Thank you for the transparency!
BR
Rob
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
