Cortex XDR Discussions

Query regarding malware scan

During initiating the malware scan on connected endpoints suppose the system moves to disconnected state for few days and the scan status starts showing in progress now. Could you please let us know the duration of the malware scan is applicable for

Malware scan is not getting intiated

Hello,

While initiating malware scan through policy, for certain endpoints the scan is not getting initiated, and the scan status is "None". How can this be resolved?

How to check endpoint has no agent and intregate edl with NGFW

Hi Expert ,

How to check endpoint has no agent and integrate edl with NGFW when found endpoint 

Now , I have try to create  python script  to get all endpoint  but not have idea to check endpoint has no agent 

Thank you

Whitelisting of Files

Hello, 

We are running periodic scan on all endpoints . During this scan few files has been detected .We have  got confirmation that some of the files are legitimate and it's being used in infra. 

Can you please suggest in providing what is the best

Block a digital signer?

Does anyone know if there is a way to block a digital signer? Or does anyone have any better ideas for blocking Wave Browser without blocking all of their ever-changing thousands of hashes?

Visualize Running processes through XQL and send alert?

Hello dear community!

is it possible to visualize through XQL a prozess which was not terminated and is still running?

In the causality view it is visualized, but I would need it to create a alert. 

If a special process is still running, get a mail

Cortex XDR Alerts not found after resolving

We have resolved some alerts in Cortex XDR  by adding the initiator path to allow list of specific policy but those alerts are not visible in the Cortex XDR alerts console anymore and neither in the management logs.

Cortex XDR @Cortex-support 

Cortex XDR

Hi people,

1) I have installed the cortex XDR on end user PC and when I tried to scan email attachment on the end user PC I am not able to see any option to scan email attachment. I am a system Admin and I want the end user to scan email attachment w

Integrate Cortex XDR with the SIEM (Microsoft Azure) solution

 Integration of Cortex XDR with the SIEM (Microsoft Azure) solution 
Had a few queries regarding it:- 
1. Supported integration methods & recommended integration methods for integration with Microsoft Sentinel.
2. What all logs can be forwarded (eg: Ale

Help! Upgraded to 7.8.1.11343 now all clients can’t run certain applications

We upgraded our clients from version 7.7.X to 7.8 and things like Visual Studio and Gitkraken and homegrown apps fail to run. No logs and really no errors other than just crashes or freezes. I pause XDR Agent and it runs fine. Anyone else experience