Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 1375 Views
  • 0 replies
  • 3 Likes

Resolved! Cortex XDR Upgrade from Pro to per GB

Hello dear community, 

 

we would like to ingest logs for more visibility. 

Actually we have Cortex XDR Pro. 

How does the upgrade path look like to get the ability to ingest FW and Windows Event logs? 

How much more we need to pay and how does the l

...

RFeyertag by L4 Transporter
  • 2527 Views
  • 3 replies
  • 0 Likes

Resolved! Detect and Restrict Powershell cmdlets

Hello everyone,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.

After sev

...

agirones by L1 Bithead
  • 2103 Views
  • 4 replies
  • 0 Likes

Forensics free trial license expired

Helllo everybody, 

 

I have a Cortex XDR Pro per GB and I've acquired a "Forensics" free trial license, which expired yesterday. I need to access the results of the forensics, would i be able to do it? or do i need to renew my license?

 

Awaiting any

...

loropeza by L0 Member
  • 1100 Views
  • 1 replies
  • 0 Likes

False Positive (GitButler)

All versions of GitButler are falsely flagged by Cortex XDR.

The corresponding GitHub issue can be found here: https://github.com/gitbutlerapp/gitbutler/issues/3518

 

The hash is related to version 0.11.1

 

Component: WildFire
Cortex XDR code: C040005

...

Resolved! Cortex XDR dashboard into Grafana?

 

J.JohnsonRock
L0 Member
 
 

am ‎04-08-2024 11:02 AM

Hello, I don't know if I'm in the right place...

I would like to integrate our Cortex XDR dashboard into Grafana. I know this is possible via an API, but which connec

...

JJohnsonRock_0-1712642428134.png

Resolved! Automation rule to add IP address to EDL

Is it possible to create an automation script or rule to add a remote IP address to an EDL in Cortex XDR?  I'm exploring the best way to handle this.  For example, after the recent CVE-2024-3400 disclosure, I patched my firewalls, and all is good.  H

...

Resolved! BIOC API access

Hello Folks,

In the Cortex API documentation there is not mention of how to make BIOC rules using APIs or how to access them.

I was wondering if anyone has been able to use the API to create BIOC rules.

Resolved! XQL query checking BitLocker status

Hi,

I can see BitLocker status in Dashboard -> Endpoint -> Disk Encryption Visibility, but when I try to do the same with XQL query, I wasn't able to find Columns Status in any of preset or dataset. Can somebody help me with this please? I would like

...

Scripts Library

Hello everyone,

What types of scripts have you configured in the 'Scripts Library' of Cortex XDR and for what purpose?

With these scripts, is it possible to create automations?
For instance, to detect if a certain computer has any software installed..

...

tlmarques by L4 Transporter
  • 1042 Views
  • 1 replies
  • 0 Likes
  • 2421 Posts
  • 88 Subscriptions
Top Solution Authors
Top Liked Authors