XQL - Hunt for Possible Spring4Shell Vulnerable Application

Brief:

Spring4Shell Vulnerability Exists in the Spring Framework. Java based application are developed using this framework, we would not see direct installation of spring framework on the system but as part of a Java application. (At least what I hav

A large number of port scans

Hi guys! 

Recently, we often encounter incidents associated with a large number of port scans in Cortex XDR. We assume that this started after the last update. Does anyone else have something similar?

Thank you!

Cortex blocking hashes in allowed list

Hello ,

Just wondering why does cortex block hashes that are already part of allow list sometimes ?

Analytics BIOC Rule, Identity analytics

Hi all

I have a question regarding a certain alert: Multiple user accounts  deleted

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-analytics-alert-reference/cortex-xdr-analytics-alert-reference/multiple-user-accounts-were-deleted

1) Is

Cortex XDR Pro - Vulnerability Assessment Replaced KBs

Hey dear Cortex XDR Admins and Users, 

when a KB was not installed in march and replaced with another KB from april like here:

https://administrator.de/forum/windows-server-2012-r2-windows-updates-2627286719.html

Is the best way to exclude the CVE in