This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Resolved! USB Use - empty results table rows

Hello, 

Currently I am monitoring USB device use within my tenant, with the following query:

config case_sensitive = false | preset = device_control | join (dataset = endpoints ) as EP EP.endpoint_name = agent_hostname | filter event_sub_type = ENUM...

PaulThomas00_0-1709669155349.png

Resolved! Reports on automatic scans

Good morning,

 

We want to schedule automatic scans for some servers, currently we already have a malware profile created that runs these scans. The problem is when it only generates a log that it was done, but no report as such. Is there any way to

...

dlozanog by • L0 Member
  • 635 Views
  • 1 replies
  • 0 Likes

Resolved! Filter by IP address range

Hello there,

 

I've definied multiple IP address ranges in the assets module of Cortex XDR console.

Some range belongs to the same factory.

Ranges have a name like this :

FactoryName - VlanName

 

We have multiple units.

Somes units contains multiple

...

Data Ingestion License Violation

After our Cortex XDR tenant was upgraded to 3.9 we started receiving the following error: "License Violation warning Based on a 7 day average calculation from February 24th 2024 to March 1st 2024, your daily ingestion quota is exceeded."

 

Looking at

...

jruck by • L2 Linker
  • 940 Views
  • 6 replies
  • 0 Likes

Mobile iOS install with InTune

Hey everyone,

Is there a way to bypass the onboarding wizard screens that you see when setting up the app and just configure it with Intune? If not, we'll have to manually walk through these settings on potentially thousands of devices.

Cortex Xdr is capable DLP?

 

Hi
I have a doubt about cortex-XDR. That is, my entity was implemented in cortex-XDR, but I have to know if XDR has a capability with DLP. Can I use XDR for DLP?

 

Regards,

Salivan

salivan by • L0 Member
  • 593 Views
  • 1 replies
  • 0 Likes

XDR Capability

Hi All,

 

Does XDR have below capabilities - 

  • Network traffic analysis
  • Digital Forensic capability

I know it has DF with the pro license, just wanted to know more about it also can we just click on it an enable it on the license page or does it requi

...

Resolved! Vulnerability Assessment - How does it work?

Hello,

 

I'm trying to figure out how the vulnerability assessment (VA) feature works since I've got so many false positives.

I've check the documentation but it's not clear enough for me.

 

For Windows, does VA looking for installed KB? If the KB is

...

Resolved! Exclusion process cortex?!

Hi,

How can I create an exclusion in Cortex XDR to stop it from scanning a specific executable??

We have a critical software in our company, and we've noticed that Cortex is constantly analyzing it, causing the machine high CPU and MEM.

How can we excl

...

  • 1873 Posts
  • 78 Subscriptions
This widget could not be displayed.
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks