Cortex XDR Discussions

XQL removes endpoint CVEs and ALL information

I want to remove all information related to the endpoint "ABC". However, with the following xql query, it only removes cves that are exclusively associated with this endpoint. If a cves is associated with multiple endpoints, the affected_products, af

Malware Scans

Hello community.
Do you know what the “scanning complete” column in the malware scan results refers to? I see that in the values it shows 3 folders, does that mean that it only scans those 3 folders? I attach evidence

Role to access va_cves and va_endpoint datasets

Hi,
I need help creating a new role in the console that allows access via API to dump the data from the datasheets va_cves and va_endpoints. Could you help me?
Best regards.

Cortex XDR on Citrix non-persistent multi-user server

Hi community

Quite often we have issues with cortex xdr on citrix infrastructure. Currently meinly with windows server 2022 we are in the situation where it is not possible to run cortex at all because of possibel servercrashes which are not yet anal

Question about folder exclusion

Hello Palo Live Community.

I need to exclude a folder along with all its subfolders and files of any type. To do this, I set up a rule similar to the following:
C:\Program Files (x86)\folder\*
However, I keep getting alerts about suspicious files insid

Email alert when a device checks in?

Hello,

Can XDR send an email when a specific device checks in?

Thanks!

Cortex xdr agent certificate

Hi all,

I have some doubts regarding the Cortex XDR agent certificate. I have gone through multiple blogs, which provided some insights, but I am still unable to see the complete picture. Below are the key facts I have gathered so far:

1. New Certifica

[Cortex XDR] - I Want to monitor the file creation, modification, removal, etc. under the specified path through the BIOC Rule.

Dear Everyone,

I would like to use the XDR BIOC Rule to block the host from creating, editing, deleting, renaming, etc. files in specific file paths.

I tried to write a BIOC Rule but found that it can't be successfully applied to the Restrictions p

On-demand file Examination policy

Hi,

I've got 3 questions.
1. I want to schedule a daily scan on servers with cortex xdr, I'm aware that Cortex only has options for weekly and monthly, so I tried creating a new profile for each day mapping them to the same servers but some are bein