Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 715 Views
  • 0 replies
  • 2 Likes

Resolved! Access id denied error on Live Terminal session

During the live terminal session I did to an endpoint, I couldn't move/copy/rename text files with neither CMD nor Powershell. I always get the Access is denied error. What access rights does Cortex live terminal operates at? Is there any way to run

...

SSH access to Broker VM impossible/failed

Hi everyone,
I'm trying to access my VM Broker with SSH in admin mode but without success.

In the Broker configuration, I use the command :
ssh -i [/path/to/private.key] admin@[broker_vm_address] then I connect to the Broker machine without any proble

...

S.Vilon by L1 Bithead
  • 812 Views
  • 2 replies
  • 0 Likes

Vuln drivers - scan

Hi,

 

Anyone know if is possible to retrieve the devices with drivers with vulnerabilities?
I've a lot devices with Cortex XDR and my objective is force IT guys, update vulnerable drivers etc.

 

tlmarques by L4 Transporter
  • 741 Views
  • 2 replies
  • 0 Likes

XDR API for Policy Management

Is there an API in XDR for Policy Management?

I'm trying to get the list of policies, profiles and their rules.

There is /public_api/v1/endpoints/get_policy (Get Policy • Cortex XDR REST API • Reader • Palo Alto Networks documentation portal)

Howeve

...

RishitShah_0-1703167831594.png

Blocking Bluetooth

Hello, 

 

I want to block blueotooth activities on endpoints in Cortex XDR. Is there any way or rule to do this? If yes, can you write rule?

 

 

Thanks in advance. 

XDR Policy Baseline/Comparison Tool

Is there a method/tool available that anyone is aware of to better manage multiple policies or quickly/easily identify those policies which may have/need slightly different configurations?

 

For example, if we have 2 dozen policies and there's a new

...

XDR AGENT ALL DEVICES

 

Hi everyone,

Does anyone know of or have an automation to periodically check if all devices in the company have the Cortex XDR  Agent installed

I currently use Mapper, but my network is large, with over 35k devices (including computers, printers, a

...

tlmarques by L4 Transporter
  • 901 Views
  • 2 replies
  • 0 Likes

Resolved! XQL Help - Any AI tools, query library?

Wondering if there are plans to help build queries? Something as simple as looking for a file called "testfile" requires the query with the below code:


|preset = xdr_file
|filter action_file_name contains "testfile"

Another example that we are current

...

J.Suter by L2 Linker
  • 1563 Views
  • 3 replies
  • 0 Likes
  • 2275 Posts
  • 86 Subscriptions
Top Solution Authors
Top Liked Authors