Resolved! The query is w.r.t API operation

Hello,

Is the API function available to run the "File Search" operation? --> (“Incident Response --> Action Centre --> File Search- Sha256”). Did not find this option in the Cortex XDR API documentation, however, wanted to confirm and check if this c

Resolved! Whitelisting XDR analytics alert for Large uploads

Hi Team,

I need to whitelist repetitive alerts triggering for ( 'Large Upload (HTTPS)' alerts detected by XDR Analytics ). Kindly help with how it should be done.

Regards,

Shahwaz

Resolved! Exception Exploit Module

Hello Community,

I would like to create an exception rule for an IIS worker process w3wp.exe, which module would be the appropriate one where the exception would reside.

Based on the documentation here EXPLOIT SECURITY POLICY offers protection ag

Resolved! Server in the DMZ- unable to Live Terminal Into

All,

When looking through the log file of the agent, I ran across this. Can anyone tell me what its for and why is it missing? This was a fresh install of the latest Cortex agent. Thanks.

Payload archive file \"C:\\ProgramData\\Cyvera\\LocalSyste

Resolved! Cortex XDR 7.9 CE not installing on Windows Server 2008 R2

Hi,

There is Windows Server 2008 R2 server which had Cortex XDR 7.9 installed. As this version is end of support in next few weeks, I decided to install 7.9 CE, which according to compatibility matrix:

Windows • Cortex XDR Compatibility Matrix • Re

Resolved! How to convert Cortex XDR agent to Critical Environment version

Hi

We have server which has Cortex XDR agent 7.9, as we can't upgrade and the end of support for this version is 11 of September 2023 I want to convert it to 7.9-CE which gives me additional time. I checked the documentation but can't find clear an

Resolved! Cortex XDR on Ubuntu doesn't recognise vulnerabilities correctly

Hi,

Cortex XDR agent (version 8.1.0.107064) installed on fully patched Ubuntu server 22.04 doesn’t recognise vulnerabilities correctly. It shows over 330 false positives.

Some examples below:

CVE-2015-34-5 – ntp vulnerable version prior 4.2.8p2-RC2