Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

XQL Stacked Graph

Hello everybody,

I need to create stacked graph similar to the one on Ingestion dashboard (Daily consumption).

The graph should have DNS query name on X axis and total count on y axis. But at the same time, I need to have the column separated by DNS_

...

Honza_Linhart_0-1695125769183.png

Resolved! File search and destroy

Hello,

 

In some cases, when we try to delete files using hash/path, file deletion fails due to "Access Denied".

 

What could be the reason for the deletion failure?

 

 

RamyashreeMada_0-1695906389213.png

Resolved! Data Exfiltration / Large file uploads

Hello community,

 

I was wondering if anyone found an efficient query to look for data exfiltration/large file uploads?

 

I'm looking more from a threat hunting perspective, where I would want to trace one or multiple file being uploaded to a remote dest

...

unable to install XDR on windows server

Hi Team,

 

We are getting this error while installing XDR on a Windows server - The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2502

 

Can someone pls help to

...

Resolved! Cortex XDR IOC Incidents Query

Hi Team,

 

We have detected several IOC incidents in the Cortex XDR console. The action status for these incidents is marked as 'detected,' but upon further investigation, we found that the internal network team had prevented these incidents in the P

...

Cortex XDR Incident Report

Looking for a way to create a report that shows how long it is taking our analyst to close an incident. I have read elsewhere it is not possible since the data is not exposed to xql.  Does anyone know how to create something that would show how long

...

Top Solution Authors