Cortex XDR Co-Existing with MDfE

Hi There,
We have an Enterprise customer here in NZ who wants to have Cortex & Microsoft solutions on all their Windows 10 endpoints. So here is my query - Can Cortex XDR co-exist with Microsoft Defender for Endpoint on same endpoints and both operate

Network Visibility on Cortex XDR

Hello,

In my organization we has recieved multiple alerts recently regarding suspicious communication towards our WEB servers.
The communication was from a workstation in the organization but we can't understand from which workstation because the commu

Cortex errors on laptop

Hi All,

I have been notified that few of the users are receiving errors (attached) related to Cortex.

I need to investigate this but not sure where to start and what to look for, Can anyone guide me here.

Regards

Asif Siddiqui

Cortex XDR: iexplorer.exe execution triggers the Memory Corruption Exploit Module

Hi,

I am having this problem in a host managed by Cortex XDR , whenever I execute iexplorer.exe or outlook an xdr agent alarm is triggered indicating that it's a Memory Corruption Exploit. Except creating an Exploit profile and excluding this kind of

Cortex XDR also impacting opening of files on the shares.

Hi Team,

We have been notified that  Cortex is taking up a lot of memory on Desktops and servers, is there any performance tweaks you can make? Cortex XDR also impacting opening of files on the shares,

I need to understand what all things we can che

Global Protect saml autentication and azure ad configuration?

Hi, I have configured gp with saml autentication; my azure ad connector is configured for hash pass synchronization.
I noticed that gp always authenticates me regardless of whether the password has expired or not.
there is no way to force me to change

Device Control - Exception

Dear guru,

Currently testing the flexibility of the Device Control Feature under XDR.

Aim:

Block all the mobile phone connecting to Endpoint except some VIPs.

Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devic

Enter multiple sha256 request in one sweep

Hello all

Is in the query Builder a way to enter many sha256 in one go?

Thank you

roger

Auto Scan For External Devices

im looking to enable auto scans for all external devices connected to the endpoint (we use Cortex xdr)

For example: If a USB drive gets plugging in it will get auto scanned by XDR.

Cant seem to find the location of this setting

Please advise,

A

IOC rule creation

If I add a file hash in IOC list, will it be automatically blocked as well?