Clean up Tags list

Hello All,

I want to clean up my tags list, because some of the old tags that we used are not needed any more.

We don't have active devices with tags that I want to remove.

Any idea from where i can do that?

Regards,

Vasil

Number of incidents per month on cortex XDR

Hello,

Does anyone know how to generate a report of the number of incidents per month on cortex ?

I can only generate for the current month and not for the past months.

Thanks in advance.

agent intall exceed license number of agents

I read the relevant documents, but I don't quite understand them. I hope someone can confirm them for me.

reference articale url :https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/cortex-x

Pause Endpoint protection

Will XDR services be stopped when we pause endpoint protection?

Searching for multiple hashes on cortex XDR

Does anyone know a way to search for multiple hashes on Cortex XDR?

file_search = existing_files does not allow any operators other than "=" for the sha values and you can't string multiple in a query. 

I feel like I'm missing something and there sho

Confirmed issues with some identity threat modules and risk management dashboard

Hello everyone!

Recently, I have been learning about the Identity Analytics feature in Cortex XDR.

After enabling Identity Analytics, I found that not every tenant presents the same interface.

I found that the following UI features are not identica

Changing cortex installation directory in Linux

Hi All,

Need some help!

We have a Linux instance where the opt/ folder size is 2 GB and the recommended disk quota by Cortex is 5 GB. We can not resize it.

Do anyone know if there is a way to change the installation directory of Cortex from /opt to

Detection of various open source apps

Hi All,

We want alerts to be triggered for various open-source applications like NodeJS, Nginx, Python, etc.

Kindly let me know how we can achieve this.

Thanks

How to use interactive script mode Run Kansa investigation powershell

Hi 

does anyone know

How to add investigation powershell to the Agent script Library of XDR Action Center. That I can choose it to do incident investigation when using XDR interactive script mode

Sorting out generic website fw rules

Hey everyone,

We are trying to sort out generic firewall alerts that we get as the incidents.

Currently, when there's site blocked that someone browsed through, we get the incident to check for it.

I would like to implement some correlation rule that w

What is /opt/traps/analyzerd/clad?

Hello

We run several Linux Servers with XDR on it.

11 out of those Linux Zoo, we get an Insident of our Monitoring, claiming, that there are double processes running:

3587 /opt/traps/analyzerd/clad -n clad -c 197:requests -- --log-level 7 --max-w