Hi,
How do I allow users to open the cortex on devices?
agent 7.4.0
high memory use-738M
I take log support and uninstall the program, it's happening only on one computer.
what should I check on the support log? there is so many file and log...
Hivenightmare (CVE-2021-36934) has been out for a few weeks and with no MS patch yet, i was wondering if anyone has done anything in Cortex XDR on to help with this? Maybe alerting if SAM files being access or anything like that?
I receive alerts from my siem, that the XDR sent alert agent uninstalled
and the computer name is it1179128192
I asked our help desk and they say that we don't have a computer with this name.
Where can I found information about this activity I want t
...
Hello,
Need help how to create groups in XDR based on the network subnets
hi there,
I'm quite new to cortex, gone through the guide available on the site but nothing related to the following error:
HTTP/2 500 server: openresty/1.15.8.2 date: Sun, 18 Jul 2021 05:26:48 GMT content-type: application/json content-length: 131
...
Hi All,
I have accidently deleted endpoints in cortex console. Can you please advise how to get back those deleted.
Regard
Asif Siddiqui
Hi all,
One week ago I added an artifact (hash) to the allow list. This hash was deteced (reported) by the XDR Agent.
Today, I have a new incident, only related with the same artifact(hash) (different host).
I was expecting of not seing any inciden
...
Wondering if any one might have insight of why and what the following means in the trapsd.log for a few systems that have yet to automaticly update themselves to 7.3.2 (Also find if in console, and set the agent to upgrade, its still reflecting 7.3.1
...
Is there a discussion area where people can share queries they have built?
we have a customer which noticed the following? is it normal to have an endpoint with multiple instances of "Cortex xDR local Analsys worker" running in the task manager.
is this normal behavior?
Thank you
Stephane Boudreau
Hello all. We are using Global Protect with HIP rules turned on to enforce valid AV, etc. After an update to 7.1.1, HIP was seeing our virus definitions were dated 1/1/1970 for at least a few hours. Had to reboot before GlobalProtect would see curre
...
