Http logs collector example not working

Hi
hope this is the right place to ask this question
We were given a temp user to play around with the Cortex XDR and we are trying to insert some dummy data into it.

I am trying to insert data using an Http logs collector, following this guide
unfortuna

Analytics BIOC Rules - Causality Change - No. of alerts rising, but where to see who, why and what?

Hello Admins, 

We use Analytics BIOC Rules. But where is the Causality Change? No of alerts rising, but where to see who, why and what?

Thank you! 

BR

Rob

How can Cortex XDR Pro find the origin process from a DNS request if the process not uses DnsQueryEx RPC Call

Hi Community,

Is somebody able to explain if Cortex XDR Pro is able to find the origin process if you have the DNS Query? A lot of windows internal process uses rpc calls to a svchhost.exe, which then makes the dns resolving, which is cortex xdr pro t

Servers unable to complete scan job within 24 hours

We have some servers in our environment that have a lot of files. The scans are scheduled for 2am Saturday mornings, but do not complete within 24 hours and the scan times out and is then cancelled. 

What are the steps to remediate this.

XQL - Hunt for Kerberos Relay Up Activity

Just posting, if this is useful for someone who might be hunting for Kerberos Relay Up (Privilege Escalation on Windows System) Activity.

The purpose of this hunt is to look for suspicious logon on windows system using Kerberos Auth Package where the

XDR Analytic alert

I am not able to see all cortex XDR analytic alert on Console that is mentioned in the document . why ?

Cortex Endpoint Isolation - Allowing Microsoft Intune

Anyone have tips on figuring out how to allow exceptions to successfully communication over the internet while an endpoint is in isolation? I would like Microsoft Intune to be able to continue to reach the device while the device is in isolation for

Securing old web server IIS6

Hello,

We are solving a case of an IIS6.1 vulnerability on an old Windows 2008 R2 SP1 system. Microsoft no longer has support for Windows update. The customer cannot migrate to the newer system yet.
Would Cortex XDR be able to secure IIS v6.1 web serv