XDR Client version 7.5.0 High Memory Usage

We recently upgraded our XDR Clients from 7.4.2 to 7.5.0. Since the upgrade a lot of our Windows Servers seem to be using a lot more memory that what I recall other client versions using. For example, older versions where like 200-400MB of usage but

Alert USB activity

Hi community,

Can I check is there any one create a alert if a user copied more than a certain number of files into a USB drive?

Thank You, Cheers!

remove users Cortex XDR

Hi,

I'm trying to remove user from "Access Management" in Cortex XDR but I cant find a way to do so.

What is the best way to preform this task?

Thanks on advance,

Ronnie.

Need to extract installed application.

Hi,

I have queries regarding cortex XDR,

Does the cortex xdr provide application inventory counts?

We want to extract each and every application which is installed in all our network systems but with IP.

for e.g, 10.10.10.10 is a system IP, I want to

Problem uninstalling Cortex XDR Agent

I often have the problem that the host loses connection to Cortex console due to a failed agent update and I cannot uninstall the agent on it and reinstalling the agent results in a rollback. There is a file named "tdevflt.sys" left in the "C:\Progra

Query Builder to XQL

I have built queries within builder that I cannot replicate in a xql query

Is there a way to convert them quickly?

The example below was built with the builder, a search for files within removable media for the previous 24 hours

I need it in xql syntax

Adobe Reader block install macOS

Cortex XDR

XDR agent quota exceeded

We're running 7.4.x currently and we've been seeing a ton of these alerts lately, and it seems to be for the same four or so machines out of several thousand. It is just alert after alert. I checked the log folders on the machines and they aren't any

Trying to setup Cortex Data Lake

Hi all,  I am new to this forum and new to the job where I am having this issue so please forgive me if this is an easy question that has been answered, I could not find the info I was looking for. I am trying to setup a Cortex Data Lake for my Corte

All Cygwin apps see the decoy files

Hi. My organization forced the installation of Cortex XDR 7.4.2.35695 on my workstation and When I use Cygwin it lists the anti-ransomware decoy files. It's especially troublesome when I copy directories because real files are created then.