IOC rule creation

If I add a file hash in IOC list, will it be automatically blocked as well? 

I Wants to create new user account in Cortex xdr

Hi All,

We have a new requirement where we need to integrate Cortex xdr with IBM Qradar and for this integration I have a IBM guide where it ask to download and install cortex xdr app, which we did, however from Cortex side (in Console) there are few

Cortex xdr notification for Licenses

Hi All,

I have have received a notification  in Cortex console (top right corner) where it says "Your license has expired or exceeded its capacity, Please contact support"

We have a license capacity of 6000, I need to understand Is it really the capa

I want to create a new user account in Cortex xdr

Hi Team,

I need to create a new user account in Cortex console, Currently  My role is app administrator of the Cortex xdr app (I never created any user account previously)

This user account requirement is for the user who will be working on the Integ

macOS Network Filter Causing Issues with shared VM connections

Hi Everyone, 

We are a new customer for Cortex XDR and the network filter seems to be killing our ability to share a connection to our Windows VM's from our macOS host while using our SonicWall VPN. If the VPN is disconnected connection works fine, w

Cortex

Cortex

Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Hi Guys, 

In the Cortex XDR, we are getting an alert indicating Behavioral threat detected (rule: bioc.syscall.remote banker behavior). Although the file is blocked which is benign, the is no information related to the rule. Does anyone have a clear

Use of MFA to log on to Cortex XDR

How do I set up MFA for admin access to the Cortex XDR console?

"Actions" in action centre are stuck at "In progress" only

Hi All,

I have started facing an issue where whatever actions start via action centre, First it says "Pending" after that it turns to "In progress" status. and it stays there , It never shows status as "Completed successfully"

Just to test, I initiat

File server, backup server and storage server profiles

Hi,

we are about to activate Cortex XDR agent with Default Policy Rules (i.e. Default Exploit, Malware, Restrictions, Agent settings and Exceptions profiles) on some Windows servers which contain a huge amount of data (terabytes).

Are there some reco