Cortex XDR Discussions

Cortex XDR missing powershell logging

I'm doing some Powershell detection testing and I noticed that when I open the Powershell GUI in windows and run a command below it doesn't trigger a Powershell detection. However, when I add powershell in front of the command it does trigger an eve

...

Slow Dashboard in Cortex XDR Version 3.9

Hi Community! Our Tenant was recently updated to XDR version 3.9 and since then the main dashboard seems to be much slower and unresponsive. Anyone else in the community experiencing this? I have been testing using Edge and chrome the quick launcher

...

Downloaded tar file contains a broken cortex.conf with deb-package

I've now finally sucessfully installed Cortex XDR in an Ubuntu-22.04 image in WSL2 in Windows 11.

However the provided cortex.conf file in the tar-file is missing a newline on the last line of the file, making it not work properly.

Editing the file a

...

Resolved! Windows Event Collector

Hello,

I want to activate Windows Event Collector on my system. I am looking my documentation. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Activate-the-Windows-Event-Collector?tocId=JKwlSDeDaqpS9R1bOJda

...

Resolved! Integration with Microsoft Teams

Hello,

Can I Integrate Cortex XDR with Microsoft Teams. I mean can XDR send alerts and some notifications to teams?

Resolved! Cortex XDR flagged malicious macros

Hi team
Cortex XDR keeps generates hundreds of alerts due to suspicious macro detected in my network.
Severity : High
Alert Source : XDR Agent
Action : Detected (Post Detected)

Category : Malware
Extensions : .xls .tmp .xlt .xar

Seems Cortex deletes al

...

Resolved! XQL Query - Machine Custom Reports

Hello,

good afternoon.

I currently have a few machines and xDR installed on them.

I need to make a weekly report with the information of the machines and the scan previously configured.

Currently, what I have configured using XQL Query:

-> Checks i

...

Can we run the XDR on separate port apart from 443?

Hello All,

For 1 server we are facing the compatibility issue as the port 443 is required to upload some data for business purpose and that port is also required for the communication of Cortex agent with cortex server.

Can we use some other port

...

Resolved! Windows and Linux versions to install XDR agent

Hello,

Does Cortex XDR supports agent installation on "Tiny Core Linux", "Windows 10 Enterprise 2016 LTSB" and "Windows Embedded Standard"?

Cortex XDR Correlation rule to detect /alert if a user logon to multiple endpoints at a time

Hi ,

Can anybody help to create a Cortex XDR Correlation rule using XQL to detect /alert if a user logon to multiple endpoints at a time

Thanks in advance.

Regards

Sree Rag R

Resolved! Endpoint protection from Virtual Applications like VM ware

Hello,

Does anyone have a solution for protecting Endpoint/Hosts from installed virtual machine's access to host resources or file sharing into hosts for the given scenarios

1. Cannot block installation of VM ware category applications or path.

2

...

Windows Explorer - Internal Error: Memory Application Failure

hello, i have an issue with a specific device on-site that is showing the following error.

the user on the device accesses a large number of files on USB drives, fluctuating hundreds of GB per day. she will receive the following error before ex

...

Resolved! XDR Console Access

Hello,

Sometimes, I cannot access to the XDR console. It is just loading but nothing showing, just a white page. I have internet access. It happens sometimes and after about 15 minutes, the problem disappears.

What can be the reason for that?

Resolved! Cortex XDR

Hi Community ,

i Had Came Across Some of the Questions Regarding Cortex Xdr , Hope you'll help me with Narrow Down The Rabbit Hole

1. Why the Cortex scanning the files on the Endpoints that has the benign Verdicts in the Scanning Phase .

2. There ar

...

Resolved! Automatic updates from Cortex XDR in Intune

Hi Everone! Hope you can help me 

I have acustomer use both Cortex XDR on their endpoints for monitoring, and Intune for app deployment etc. When receiving a new PC, it is configured through Intune. However, currently, the customer has to manually

...

Discussions

Cortex XDR missing powershell logging

Slow Dashboard in Cortex XDR Version 3.9