I want to create a new user account in Cortex xdr

Hi Team,

I need to create a new user account in Cortex console, Currently  My role is app administrator of the Cortex xdr app (I never created any user account previously)

This user account requirement is for the user who will be working on the Integ

macOS Network Filter Causing Issues with shared VM connections

Hi Everyone, 

We are a new customer for Cortex XDR and the network filter seems to be killing our ability to share a connection to our Windows VM's from our macOS host while using our SonicWall VPN. If the VPN is disconnected connection works fine, w

Cortex

Cortex

Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Hi Guys, 

In the Cortex XDR, we are getting an alert indicating Behavioral threat detected (rule: bioc.syscall.remote banker behavior). Although the file is blocked which is benign, the is no information related to the rule. Does anyone have a clear

Use of MFA to log on to Cortex XDR

How do I set up MFA for admin access to the Cortex XDR console?

"Actions" in action centre are stuck at "In progress" only

Hi All,

I have started facing an issue where whatever actions start via action centre, First it says "Pending" after that it turns to "In progress" status. and it stays there , It never shows status as "Completed successfully"

Just to test, I initiat

File server, backup server and storage server profiles

Hi,

we are about to activate Cortex XDR agent with Default Policy Rules (i.e. Default Exploit, Malware, Restrictions, Agent settings and Exceptions profiles) on some Windows servers which contain a huge amount of data (terabytes).

Are there some reco

XDR Global BIOC rules

Hello.

If Restrictions profile for Windows is default then they don`t directly affect windows endpoints. We must edit and and apply them for getting protection in endpoints. But in Linux it is not same. Even if Restriction profile is default, XDR can

Cortex XDR Broker VM (proxy server)

Hello.

In XDR Broker VM i enable proxy server and configure as follows:

Type:HTTP

Address: 192.168.6.167

Port: 8080

But it is not work and in configuration status i see "in progress" even through 3-4 hours.

I want to know if is there anybody who  configur