Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Detect and Restrict Powershell cmdlets

Hello everyone,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.

After sev

...

agirones by L1 Bithead
  • 1131 Views
  • 4 replies
  • 0 Likes

Forensics free trial license expired

Helllo everybody, 

 

I have a Cortex XDR Pro per GB and I've acquired a "Forensics" free trial license, which expired yesterday. I need to access the results of the forensics, would i be able to do it? or do i need to renew my license?

 

Awaiting any

...

loropeza by L0 Member
  • 665 Views
  • 1 replies
  • 0 Likes

False Positive (GitButler)

All versions of GitButler are falsely flagged by Cortex XDR.

The corresponding GitHub issue can be found here: https://github.com/gitbutlerapp/gitbutler/issues/3518

 

The hash is related to version 0.11.1

 

Component: WildFire
Cortex XDR code: C040005

...

Resolved! Cortex XDR dashboard into Grafana?

 

J.JohnsonRock
L0 Member
 
 

am ‎04-08-2024 11:02 AM

Hello, I don't know if I'm in the right place...

I would like to integrate our Cortex XDR dashboard into Grafana. I know this is possible via an API, but which connec

...

JJohnsonRock_0-1712642428134.png

Resolved! Automation rule to add IP address to EDL

Is it possible to create an automation script or rule to add a remote IP address to an EDL in Cortex XDR?  I'm exploring the best way to handle this.  For example, after the recent CVE-2024-3400 disclosure, I patched my firewalls, and all is good.  H

...

Resolved! BIOC API access

Hello Folks,

In the Cortex API documentation there is not mention of how to make BIOC rules using APIs or how to access them.

I was wondering if anyone has been able to use the API to create BIOC rules.

Resolved! XQL query checking BitLocker status

Hi,

I can see BitLocker status in Dashboard -> Endpoint -> Disk Encryption Visibility, but when I try to do the same with XQL query, I wasn't able to find Columns Status in any of preset or dataset. Can somebody help me with this please? I would like

...

Scripts Library

Hello everyone,

What types of scripts have you configured in the 'Scripts Library' of Cortex XDR and for what purpose?

With these scripts, is it possible to create automations?
For instance, to detect if a certain computer has any software installed..

...

  • 2022 Posts
  • 81 Subscriptions
Top Solution Authors