Alarm on disconnected agents..

Hi, we're in the process of migrating our endpoint security on servers and PC clients to Cortex XDR. I'm new to Cortex XDR, but have started to walk thru all kinds of documentation/training..

Today's question  :

If I, or someone else, disables t

Alerts and incidents

Hello Palo Live Community.
Does anyone know what are the criteria that Cortex XDR takes into account to create an incident for a single alert? This is because I have seen that some alerts do not necessarily form an incident, but in other cases, yes. I

Azure AD and InTune

Hi Palo Live Community, I'm hoping that someone has worked with Cortex XDR and Azure InTune.

I'm trying to find a dynamic way to apply an extension profile  (block USB), in Cortex XDR, targeting specific endpoints that reside in Azure InTune.

Bef

Agent Configuration - Password strength

Hi, I'm struggelin' to set a new password. Have tried all kind of combinations. Allways get "Does not meet the requirements." 

Please see attached for an example..

I've seen earlier discussions on this. Something does not seem to be working as in

ITDR Honey Users for Cloud Identities

Hi Everyone

We're using ITDR module and are manually assigning asset role as described here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Asset-Roles

Only on-premises identities from AD can be assigned to asset r

XQL query for incident report

I like to get a hint how i can build simple xql query for  overtime timeframe for incidents. I need to filter that data, but that kind report that i can show example monthly base report for customer. where there are data for each day

XQL Query Help

XQL Query Help

XQL Query Help

I'm trying to write a few XQL queries in Cortex XDR, but I’m quite new to it and running into some difficulties. I’d really appreciate any guidance or examples you can provide for any of the following queries:

1. To detect when the Cortex XDR Agent is u

Material for PSE Cortex Professional certification

Hi all,

Have any of you obtained the PSE - Cortex Professional certification? If so, what material did you use? Is the study guide sufficient?

Thanks

Cortex xdr with RedHat Quay with Clair

Hello PA community,

For all images on customer s OpenShift clusters, they have a policy that all images have to be stored in their RedHat Quay with Clair.

Customer has tried to setup a mirror with the "europe-west4-docker.pkg.dev/xdr-eu-2009645628112

Cortex XDR agent on Domain Controller

Dear all,

May I have a chance to find with you palo guidelines regarding Cortex XDR agent installation on Domain Controller.

Any comments ?

Growth of ARM processors in Windows Ecosystem

With the continual growth and development of ARM in the windows sector there is a clear demand for a Cortex XDR Agent for Windows on ARM. This also impacts virtualisation on Macs and other devices with ARM processors.

Is there an roadmap for considera