Question About Custom Logs Time Field

Question

I want to replace _time field value with original timestamp, but I can not find way to do this. 
Please tell me how to replace _time field value or Is this not possible due to specifications?

Background

When we collect logs from XDR Collector

Bloodhound detection

Does anyone know what ways exist in Cortex XDR  to detect if someone is running BloodHound?

PoorTry kernel-mode Windows driver Detection/Prevention using CortexXDR?

Wondering if we have any IOC, settings, content updates, to find and or inoculate against the PoorTry kernel-mode Windows driver. It's incredibly potent and resistant to defensive measures.

Latest article on it: PoorTry Windows driver evolves into

MOQ - Cortex XDR NFR

Hi team, 

May I know, what is minimum quantity to purchase for Cortex XDR (Prevent and Pro) NFR?

Also, is Cortex XDR NFR quotation will consist only 1 line item, no need for any support SKU?

Thank you in advance!

Cortex Update

I have an issue when trying to update users to the latest version of cortex. The control panel shows that Cortex is not installed but the Cortex Icon shows up in the system tray and I can access the console from there. When I run the uninstall tool t

Feature Request: Version Control for Rules

Would anyone else find it beneficial to have version control for rules made in XDR?

I feel like in theory it would be a reasonable lift to incorporate version control for changes made to custom correlation rules, for example.

XQL for Creating Multi-Series Line Timechart Graph

Hi all.

I want to create multi-line graph, and I can create it. But My XQL query is too long and too many manual operation is there.
Do you have good idea for create multi-series line graph? (more shorter one)

Example (Just example. There are no Confide

Distributed network scan and Network Location Configuration

Hello,

I need information about these cortex agent capabilities, as far as I can understand:

- Is the agent used as a probe to detect machines without the agent installed, if so, what information is obtained Host name, IP, MAC?
- Network Location Config

"Installation directory should be accessible for user traversing make sure all directory components have at least : ------x--x "

while installing cortex XDR i am facing this issue 

 "Installation directory should be accessible for user traversing make sure all directory components have at least : ------x--x "