Best way to exclude legitimate behaviours

When it comes to excluding legitimate behaviours from BIOC rules, as far as I can see, there are 3 options:

1. Modify the BIOC rule itself adding "not equal to" logic.
2. Add BIOC rule exclusion at https://<organisation>.xdr.eu.paloaltonetworks.com/rules/exc

Cortex XDR Prevent Specific Questions

We are using Cortex XDR Prevent 

1) I see many places the word 'rules' and 'rule exception' is used , I assume this option or feature is not available in Cortex XDR Prevent as I do not see it in the menus/blades .I guess its a 'Pro' edition feature .

Modify Alerts Going to An Endpoint Group

Hello all,

I have setup an endpoint group of high profile laptops.  I would like the following configured on XDR.

- Prefix all Incident names going to endpoints in that group with "VIP Endpoint [Incident Name] (e.g. VIP Endpoint Wildfire Malware Dete

How most decisions are made by Cortex XDR ?

Greetings ,

I am using Cortex XDR Prevent and keen to know how most decisions are made by Cortex XDR about File/process/macro being malicious or not ?  So assume there are no Hash exceptions and need to know if below is true :

- First Wildfire cache i