action_process_image_command_line Filter Issue

Hi, I'm trying to build a query that would check for reg.exe launches. This is well and good, but the moment I add a filter action_process_image_command_line = "reg save" nothing appears, even though it was part of the initial result for reg.exe. Whe

Request for informations about linux 8.7.1 Cortex XDR agent issues

Hello,

I'm looking for information about possibles issues with Cortex XDR 8.7.1 on linux. We were informed of possible issues specific to 8.7.1 but the message is not helpful on what we should be aware of, to know if we are affected and if we should

Unable to Uninstall Cortex XDR Agent Due to Expired License and Missing Password

XDR許可證已過期，並且平臺訂閱未續訂，這阻止我訪問 Cortex 平臺來執行卸載。此外，我不再擁有原始卸載密碼。
是否有其他方法可以卸載代理，而不必啟動到安全模式？

Get Assets and Vulnerabilities from Cortex XDR via API

Hey Team, 
I wanted to fetch Assets and their vulnerabilities details from Cortex XDR.
Is there any REST endpoint available for the same? 
I tried searching the documentation but coundn't find it. (https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-R

Detect SSH key without passphrase

Is there a way to detect SSH key without passphrase in user laptop using Cortex XDR? Thanks.

Cortex XDR hangs up the machines and finally crashes when working on even small files in customer cloud

Hello community,

every time one of the colleagues tries to copy even a small file from the customer PC to the cloud, the  system hangs and then crashes for him. There are no alerts or incidents from his PC to the Cortex console.

The paths are always

Cloud Identity Engine Visibility Scope

I have a CSP account with multiple individual XDR tenants. I would like to know if creating CIE visibility scope using TSG ID (as mentioned here Configure the Cloud Identity Engine Visibility Scope) is something that is available to me? I don't see a

XDR CIE

How is CIE configured in XDR MSSP? Is it only on the parent and then shared to child tenants or can it be configured differently on each of the child tenants?

Carpetas de Cyvera

Consulta, tengo un servidor alertado por espacio en disco, no es muy grande el disco. Necesito poder eliminar datos para aumentar el espacio libre.

Necesito saber si puedo eliminar algunas de estas carpetas ubicadas en C:/ProgramData/Cyvera/. En el

XDR Agent Quota Exceeded

Hello, 

We receive numerous alerts of "XDR agent quota exceeded on ****"

I understand this means that the default storage is being exceeded but what exactly does that entail?

1. Are the old logs not being overwritten in time causing the alert to