Upgrade Cortex XDR Agent VDI workstation through Console

Hi peeps, 

Just checking, I've noticed today that I can initiate upgrade cortex agent for VDI workstation through console (from 8.4.1 to 8.5.1 version). Even on the pop-up agent upgrade there's still note saying "Note: VDI and Android agents cannot

How to SSH Broker VM use password

hello, I want to use ssh to access broker vm using a password instead of using a public key. can someone help me?

Cisco DUO logs ingestion and integration in XDR

Hi 

How can we request Cisco Duo logs ingestion and integration in XDR, same as OKTA and PingID. ?

Cortex XDR 

How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

Hi Members,

     Please advise. How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

Thanks & regards,

Jirapan M.

LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49112

Hi , 

How to check for the below actions in xql builder.

please help in developing a query 

1. The attacker sends a DCE/RPC request to the Victim Server Machine
2. The Victim is triggered to send a DNS SRV query about SafeBreachLabs.pro
3. The Attacker’s DNS

Cortex XDR Hardware Requirements

Hi All,

Below are the hardware requirements mentioned in the palo alto documentation to install Cortex XDR on a linux machine. Could you please confirm if this RAM (4Gb/8GB) and Hard disk space (10GB) mentioned is needed as the total minimum RAM/hard

How to Filter Alerts/Incidents by IP address?

I am trying to correlate exfiltration & port scanning incidents to identify patterns pertaining to a specific IP address to build exceptions or exclusion's for false-positives. They are not our assets, but an IP we communicate with frequently. The fi

XDR 8.2.1 on domain controllers keeps disconnecting from tenant

Hi all, we are observing this behaviour on some domain controllers where xdr agents losing connection to tenant and the only way-out is to remove them via xdr cleaner and reinstall, only to fail again in a bunch of days.

We are out of ideas, obviousl