Cortex XDR Notify about Incidents via phone call

Hi,

is there a way to configure a robocall on Cortex XDR so that if a high or critical incident raises, I'll get an automated call to my phone notifying me about an incident? Maybe someone of y'all already have such configuration and would like to

How IOCs are detected?

Hi,

I've recently noticed that an IOC that we created a month ago is still somehow being triggered, therefore an incident is generated. The IOC is a domain that we've found in a phishing email. I haven't visited the domain or clicked on that quaran

Cortex XDR Uninstall without password and active tenant

On Windows computer we have installed the cortex XDR  agent on POC tenant.

The tenant was deleted but we don't uninstalled the agent on the client computer.

We try to uninstall it manually, but we don' have the password.

We try with the default password

Question About Custom Logs Time Field

Question

I want to replace _time field value with original timestamp, but I can not find way to do this. 
Please tell me how to replace _time field value or Is this not possible due to specifications?

Background

When we collect logs from XDR Collector

Bloodhound detection

Does anyone know what ways exist in Cortex XDR  to detect if someone is running BloodHound?

PoorTry kernel-mode Windows driver Detection/Prevention using CortexXDR?

Wondering if we have any IOC, settings, content updates, to find and or inoculate against the PoorTry kernel-mode Windows driver. It's incredibly potent and resistant to defensive measures.

Latest article on it: PoorTry Windows driver evolves into

MOQ - Cortex XDR NFR

Hi team, 

May I know, what is minimum quantity to purchase for Cortex XDR (Prevent and Pro) NFR?

Also, is Cortex XDR NFR quotation will consist only 1 line item, no need for any support SKU?

Thank you in advance!

Cortex Update

I have an issue when trying to update users to the latest version of cortex. The control panel shows that Cortex is not installed but the Cortex Icon shows up in the system tray and I can access the console from there. When I run the uninstall tool t

Feature Request: Version Control for Rules

Would anyone else find it beneficial to have version control for rules made in XDR?

I feel like in theory it would be a reasonable lift to incorporate version control for changes made to custom correlation rules, for example.