Cortex XDR installation on GKE AutoPilot cluster

Cortex XDR seems to support GKE AutoPilot in latest release 8.9.

However, when generating the Kubernetes manifests on Cortex XDR dashboard, they will not deploy on AutoPilot cluster. 

Instead, error message is given after kubectl apply command:
Vi

Local Analysis Malware and WildFire Malware Alerts

Can someone explain the Local Analysis Malware and WildFire Malware alerts. The WildFire alerts seem straightforward for a file that it deems malware. On the other hand, the local analysis malware alerts trigger for a bunch of files but in the alert

Pass-the-Ticket - PtT

Hi guys, 

XQL query to get a list of current applications installed on hosts

Cortex XDR_Broker VM Cluster and Externel Load Balancer with active/active applets usage.

For Cortex XDR with XDR Pro licenses
I would like to know if  we can set up a Broker VM in cluster for "active/active" applets, Is it mandatory to have a external load balancer or is there any alternatives, Is it possible to use Global load balancers.

KB KB5022661

Hello,

Does anyone have a Cortex XDR query to check if any endpoints and/or servers are missing Microsoft KB5022661.  Any assistance would be greatly appreciated

Unable to download a from from an endpoint - File size limit exceeded

Hello Cortex geeks,

I have a problem with a large file on an endpoint. This file is relatively large (1.1GB), has no VT ranking as it's too large for it obviously, and Cortex alerted about it because of signature forgery. I want to download and exami

Search Files by Query on Android (Cortex XDR)

Does anyone know how to perform bulk queries in Cortex XDR for Android devices? I want it to show me all Android devices that contain a specific hash or that contain the same APK file.

Troubleshooting Azure Code Signing

Hello,

With recent Cortex XDR updates, Microsoft KB5022661 is now a prerequisite for many legacy Windows systems. If your endpoints are missing this, upgrades will fail.

Email Notifications Setup

Good day,

Please does anyone know how to setup email alerts for cloud agents warning (like the notifications on the notification tab on the UI) and outdated agents (which are not the latest release/version). thanks 

Android Cortex XDR

I want to know how to perform an XQL query for Android devices, where I search by hash and it shows me all the devices that have that .apk with that hash, or I can search by name.