- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
I had disabled the agent from the portal, how to re-enable it back from the portal, please support.
Hi, all. I tried using Live Terminal for the first time today, and all was going well until I got the the Command Line section. While connected to a Mac, I got this error message:
Hi,
I have deployed Cortex XDR in my environment and I have two queries it features.
1. I have integrated the on-premises AD with the help of a DSS agent and cert. It is connected and is synced in the cloud identity engine. So what is the purpose of
...
received alert from Traps regarding malware detection of the maximum system due to file “Wininfo.exe”.
Please find a snapshot of one system and suggest how to fix this. Is there any impact?
CORTEXXDR
WildFire Malware
High
Source:XDR Agent
Category:Malwa
...
When logging into Cisco AnyConnect VPN, the prompt: Login denied. Your environment does not meet the access criteria defined by your administrator.
After trying various methods, it cannot be solved:
Then we have uninstalled the Traps - 7.2.2 from th
...
We are looking to replace our current aging AV system (Trend Micro) next year as we are up for renewal. We're a relatively small shop. ~475 employees.
We are looking at jumping on the Palo Alto Cortex XDR bandwagon (We currently utilize their firewall
HI Everyone
Is it possible to forward XDR Xml Queries to be notified as an email alert? IF yes kindly assist me ,
Thanks and regards
Cortex XDR 7.4.1 in MAC having Malware Definition date as year 1970 in The Global Protect.
Somehow, the AV definition date for Cortex in Global Protect is showing as 1970. User is not able to connect to Global Protect as its failing HIP match from
...
Hi all,
What does the Prevented (Blocked) action of the XDR agent mean? Does the user receive/see any notification?
And, how do I prevent the XDR agent from blocking that key artifact?
Thank you,
David.
Hi Everyone,
Until now, I cant understood a function from IOC in Cortex XDR.
Could please share to me what's a main function IOC XDR?
Because I have tried to create new rules, for block link m.facebook , like a picture.
But, after that I have tried to
...
In some of user cortex XDR agent blocking the Xcode simulator-trampoline program. Its detect as malware and Suspicious executable detected. when we show alert after some time wildfire score display Benign and low confidence so is it safe to allow tha
...
What does "Disable Response Actions" entail for a permission? I can't find a document that outlines the permissions. Can someone explain and/or point me in the direction of what each permission allows.
Has anyone been able to get a XQL Query together that could pull out the Device Control Violations ?
Unfortunately at this point, while they are presented in Cortex XDR, I don't see a way to Export that page contents
Same with Disk Encryption Visibilit
...
We are having issues with rolling out Cortex using automation tools. Since the RPM doesn't take care of figuring out dependencies by itself, you need to manually go install those dependencies and then install the RPM. This makes installs messy and, s
...Subject | Likes |
---|---|
3 Likes | |
2 Likes | |
2 Likes | |
2 Likes | |
2 Likes |