Resolved! XQL - Process Tree Analysis - Join Statements

Hello,
I am currently trying to create a five depth process tree to perform long tail analysis on it.
The query in KQL language can be found here

The moment I perform the first join statement everything breaks
Here is the almost complete code but you ca

Resolved! Cortex XDR malware scan

Hi,

Does Cortex malware scans e-mails inside Outlook mailbox and if not, is it possible to do this?

Resolved! Initiate Script on Endpoint via API call

Hi Everyone,

I've been running Powershell scripts on my endpoints from Action Center > Run Endpoint Script > Execute Commands in the XDR interface. It works well, however I need to specify a manual query to target the endpoints I want each time i.e

Resolved! Command line to set a Proxy_List to an already installed Cortex XDR Agent

Hi.

Does anyone know if there is a command line to set a proxy to an already installed version of Cortex XDR?

I know the proxy can be set using the command line:  Cortex_Installer.msi proxy_list=”<proxy>:<port>”

That being said, I didn’t find any way

Resolved! Managed Digital Signers Block List

Hello All-

I am hoping this is a quick question as I did not find this in XDR documentation.  It is my understanding that Palo manages a "trusted signers" list.  Is there a way to leverage a similar list to automatically block the use/execution of

Resolved! Impact on licences expiration #Cortex XDR

Hello

My Cortex XDR licences expire in a few weeks

I can't find the exact impact, I suppose that the new malware signature won't be updated but :

- Will I be able to handle to connect to the console, to handle the agent

- Will the agent still work?

Resolved! 8.2.1.47908 causing Excel Add Ons to crash

Updating to Agent 8.2.1.47908 is causing Excel wih Add Ons to fail to launch. Wondering if anyone else has experienced this?

Resolved! Ingest DHCP logs using XDR collector

Hi,

I am having issues with ingesting DHCP log from our DCs. We are using the XDR Collector app. I suspect that the issue is with the filebeat.yml file but cannot figure out what the problem is. I have tried and followed the guide below and copy-pa