Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 1406 Views
  • 0 replies
  • 3 Likes

Resolved! Broker VM and connection to the agents visibility

Hello dear community, 

 

now I setup everything what I needed to get an agent running with the broker vm. The agent is also connecting through P2P and directly to the server. 

But where and how can I see, if the communication is ok through the broker

...

RFeyertag by L4 Transporter
  • 10190 Views
  • 9 replies
  • 0 Likes

clipboard functionality

Hi Guys,

 

Bit of a weird one but has anyone experienced issues with office add ins that uses the clipboard functionality?

seem to be having intermittent errors with it and it just straight up not working.

 

Tried removing the cortex agent from one o

...

Resolved! Deactivating UAC should be alerted

Hello dear community, 

 

I tested to deactivate my UAC, which was possible without any alert. 

In my opinion there should be an alert triggerd. What do you think? 

 

https://twitter.com/Computeus7/status/1562497080048119808

Reg Add "HKLM\SOFTWARE\Mic

...

RFeyertag by L4 Transporter
  • 2318 Views
  • 2 replies
  • 0 Likes

Resolved! Cortex XDR blocking TeamViewer again....

Hello everybody,

 

in the night from yesterday to today Cortex XDR disabled and quarantined TeamViewer (tv_x64.exe to be more specific) on a lot of our devices. We are using TeamViewer to offer support to our external offices. Does anybody else have

...

Cortex XDR blocks visual studio codes everytime

We have observed that cortex XDR always blocks the code written in microsoft visual studio. General codes in C language like Hello world and addtion of two numbers is also geeting blocked in local analysis and it takes a lot of time to get verdict fr

...

tejasp04 by L1 Bithead
  • 10223 Views
  • 5 replies
  • 0 Likes

Block List not working

hey,

just for testing I created python file and extract the hash. after that added the hash to the "Block List".

click on "check-it now", run the python file and nothing happened!.

someone know what could be the problem?

thanks  

 

First pic - the

...

Untitled.png
Oriavs by L1 Bithead
  • 5504 Views
  • 8 replies
  • 0 Likes

Bitlocker events

Hi Everyone,

 

We are looking into using XDR to monitor bitlocker I know we can monitor if the volumes are encrypted or un-encrypted etc.

But is it possible for cortex to pick up pin changes from the endpoint events and if so does anybody know a good

...

Resolved! Broker VM - Protection

Greetings

 

Thanks in advance for help

Just curious to know if the Broker VMs themselves need endpoint protection ? like do we need to install cortex agents on them and manage them as endpoints also ?

 

Thanks in advance .

Balaraju C

Balaraju by L2 Linker
  • 1837 Views
  • 1 replies
  • 0 Likes
  • 2423 Posts
  • 88 Subscriptions
Top Solution Authors