Securing old web server IIS6

Hello,

We are solving a case of an IIS6.1 vulnerability on an old Windows 2008 R2 SP1 system. Microsoft no longer has support for Windows update. The customer cannot migrate to the newer system yet.
Would Cortex XDR be able to secure IIS v6.1 web serv

Adding comments to permanent device exceptions

Hi all,

Is there any way to add comments to existing device exceptions? I haven’t found the option to do so.

Java Deserialization Protection

Hello,

I am looking to enable the "Java Deserialization Protection" in my exploit profile.

I see the default is to leave it disabled.

anyone else have this enabled?

any advise or experience working with this?  

Getting Multiple alerts about file "TwitchClient.exe"

I'm getting multiple alerts about the file "TwitchClient.exe" which is under below path 

C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.10043.0_x64__0a9344xs7nr4m\radeonsoftware\twitch\TwitchClient.exe

Is this file is a

Cortex XDR - Whitelist services in properway

Hi All 
I'm new to Cortex XDR Hub and i'm trying to manage somes clients in the right way.

I got this situation:
There are some clients who had used IoBit - DriverBooster for the drivers installation on the machine.
A lot of services about this applicat

Server Core

Is it possible to install Cortex on a Server 2019 core edition?  There is no graphic interface but we'd like to have Cortex running on all our servers. 

Thanks!

Do Palo Alto plan to add endpoint DLP option to the Cortex XDR/Traps offering?

In many cases the firewall based DLP or Prisma Access cloud based DLP is good enough but in some cases like if the web site can't be decrypted or a local corporate site that does not go through the Prisma Access an endpoint DLP is great.

So I hav

Threat Intelligence Feed (IP-Adresses)

Hello!

we have bought a DNS SEC product with a TI Feed (with bad IPs - about 900k). 

How can we integrate this into Cortex XDR? 

It is a textfile, which can be downloaded through a simple link. 

IP1

IP2

...

We need a way to put this IP-Check somewhere on t