Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Cortex XDR 7.4.1 crashing server

After the installation of xdr 7.4.1, our domain controllers began crashing, and even after a reboot they would lock up.  Has anyone had any issues with the 7.4.1 release on Windows Server 2012 R2?

 

Based on a Windows Dump, Microsoft reported the follo

...

Content update confusion

My content question is, if something still on 7.9. and its no longer supported/ getting content updates, does that mean the virus definitions on the unit with 7.9 is not getting updates or is it more application updates?

 

Resolved! Post detected by Wildfire

Hello dear community, 

what means Detected (Post Detected)? 

In our case, we see pdfpower.exe incidents popping up, the user says he didn't download anything to the incident time.

I think, the agent is scanning the OS, when there is allready a quaran

...

RFeyertag_0-1687468667966.png
RFeyertag by L4 Transporter
  • 6803 Views
  • 4 replies
  • 0 Likes

Cortex XDR External Alert Mapping rules

Hi community,

is there anybody who knows how External Alert mapping rules work in a case there is more than one of them?

Do you create an alert for every rule that was hit or is there some kind of precedence?

There is no mention in documentation.

Tha

...

Resolved! Events That Cortex XDR is Logging

Hi everyone,

Does anyone have a list or any reference to a document where I can see which logs Cortex XDR is gathering from a Windows endpoint? For example, to clearly know, that XDR is gathering all file event types, process creations, gathering even

...

mkuhelj by L0 Member
  • 786 Views
  • 1 replies
  • 0 Likes

Cortex XDR exclusions in McAfee/Trellix

Hi

 

We are currently deploying Cortex XDR as a managed service. However we have on-prem McAfee/Trellix which we are to keep. I've put in McAfee exclusion for "c$\Program Files\Palo Alto Networks". So anything in "Palo Alto Networks" and any subfolde

...

Resolved! XDR Resource IPs for Connectivity to XDR Server

Dear experts, 

 

From the following resource table, two json tables for GCP are provided (one for Google subnet and another for Google IP range associated with my region)

 

Question:

For the connectivity, do we need to allow all GCP IP range (in the

...

SeanDeHarris_0-1695019619119.png

Resolved! Agent v.7.9 Removed???

Hello experts,

 

From the matrix, v7.9 supposed to be the last version to support Win7, just found out 7.9 has been removed from the Agent installation while creating an installer. 

 

Do we need to "downgrade"/use much older v5.0 instead???  

 

 

 

...

SeanDeHarris_0-1694489642033.png
SeanDeHarris_1-1694489727014.png

Resolved! Hashes of the attachment from the o365 log

Dear community,


I've been evaluating the benefits of ingesting o365 logs so far. Seeking those who have the mentioned logs ingested into Cortex XDR -

does Cortex XDR review and raise alert using the hashes of the attachment if the attachment is a mal

...

File scanning.

Hey All, question for you.

 

What process does an XDR agent follow when a user opens a simple .pdf or .docx file? I am trying to find something basic to explain this to one of our Executive Managers who is concerned that the agent is causing common a

...

  • 2063 Posts
  • 81 Subscriptions
Top Solution Authors
Top Liked Authors