Resolved! Cortex XDR PRO - Exploit Profile Question
Hello dear comminity,
is there any log to see, filter or get notified, if the agent makes changes in the configuration?
BR
Rob
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
Hello dear comminity,
is there any log to see, filter or get notified, if the agent makes changes in the configuration?
BR
Rob
Hello community,
Do you know if Cortex XDR has the capability to capture full URL visits please? Can you please share any documentations saying so if yes.
Thanks.
Hello everyone,
I would like to know if any of you have struggled with support and technical cases with the need I show below.
I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.
After sev
...
Helllo everybody,
I have a Cortex XDR Pro per GB and I've acquired a "Forensics" free trial license, which expired yesterday. I need to access the results of the forensics, would i be able to do it? or do i need to renew my license?
Awaiting any
...
All versions of GitButler are falsely flagged by Cortex XDR.
The corresponding GitHub issue can be found here: https://github.com/gitbutlerapp/gitbutler/issues/3518
The hash is related to version 0.11.1
Component: WildFire
Cortex XDR code: C040005
am 04-08-2024 11:02 AM
Hello, I don't know if I'm in the right place...
I would like to integrate our Cortex XDR dashboard into Grafana. I know this is possible via an API, but which connec
Hi everyone,
Just wondering how's the performance or resource is impacted when this protection is on, i bet it would have certain impact as this is "Disabled" by default. or any other concerns if ON?
Any experience to share?
thanks
Is it possible to create an automation script or rule to add a remote IP address to an EDL in Cortex XDR? I'm exploring the best way to handle this. For example, after the recent CVE-2024-3400 disclosure, I patched my firewalls, and all is good. H
...
Hi,
I synchronise our on perm Active Directory to the Cortex XDR and this is working well. I'm creating some reports using XQL quires based on pan_dss_raw dataset. My only problem with this, that in the Schema I can't find computer's "Description" wh
...
Hello dear community,
here is a script for searching specific scheduled tasks by name in mass. The search is via LIKE and wildcards are used.
import subprocess
import sys
def ScheduledTask(scheduler_name):
# PowerShell-Befehl mit Where-Ob
...
Hello Folks,
In the Cortex API documentation there is not mention of how to make BIOC rules using APIs or how to access them.
I was wondering if anyone has been able to use the API to create BIOC rules.
Hi All,
We have a requirement to create a ServiceNow ticket by taking the slack user responses.
I have built a playbook which does send the SlackBlockBuilder to the specified Slack channel but the playbook runs only when an incident is attached to it
...
Hi,
I can see BitLocker status in Dashboard -> Endpoint -> Disk Encryption Visibility, but when I try to do the same with XQL query, I wasn't able to find Columns Status in any of preset or dataset. Can somebody help me with this please? I would like
...
Hello everyone,
What types of scripts have you configured in the 'Scripts Library' of Cortex XDR and for what purpose?
With these scripts, is it possible to create automations?
For instance, to detect if a certain computer has any software installed..
Hi all,
Can the XDR auto delete files it has flagged, be it by local analysis or wildfire analysis? Or does it just block and quarantine files?
User | Likes Count |
---|---|
2 | |
2 | |
2 | |
2 | |
1 |