Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

XQL Query to view the "Incident Name"

Hi People, 

 

I was wondering if anyone could assist me with XQL Query to display the Incident name. Please refer to the attached photo to get an idea of what I am trying to achieve. I have used the xdr_data dataset, however i cannot find the relevan

...

Cannot remove/install xdr agent

 

Hi everybody !

I would like to find out how to download the XdrAgentCleaner.exe to remove cleanely old xdr cortex agent ? 
We have several computers on which we cannot uninstall the old agent, you will find the message attached.

 

I have already follow

...

systemsi by L0 Member
  • 4575 Views
  • 2 replies
  • 0 Likes

Resolved! Broker VM connection issue

Hi Community

 

We're facing an connection issue with Endpoints using Broker VMs (agent proxy). We opened a TAC case, but it's stuck. There is no useful help yet.

- Endpoints are isolated from the internet (no direct or webproxy access)
- Endpoints are

...

Rocky-25 by L2 Linker
  • 2811 Views
  • 2 replies
  • 0 Likes

Resolved! Cortex XDR Prevent to Pro

Hi,

 

ill soon have to migrate a customer from prevent to pro. My question is i heard, that Palo just has to change the license in the background and that would be all i just have to enable the pro feature in the policy. My only concern is, that the

...

  • 2078 Posts
  • 82 Subscriptions
Top Solution Authors
Top Liked Authors