Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Notification when alerts/Incident is resolved

Hi Community

I am trying to get notifications when alerts or incidents are resolved but it doesnt seem that there is a direct way to do so.
So is there a way to send a notification (Syslog or Email) when an alert or an incident is resolved?
Thanks in ad

...

Belhaj_a by L1 Bithead
  • 825 Views
  • 2 replies
  • 0 Likes

Multiple Paths in Disable Prevention Rules

Hello
Is it possible to specify multiple values while creating prevention rules exception for one "application" ? If so what is the schematics of adding those ?
Especially in path section. As if application has multiple location paths for its different

...

how frequently XDR will push logs to Cortex?

Hi, 

how frequently XDR will push logs to Cortex? We have application it will write logs 400k per sec and log rotation setup like if file size is 50 MB it will compress the file and zips it. due to this we are missing logs in cortex xdr.

can you plea

...

Application WhiteListing

I have an application that needs whitelisting.

 

Actions Done:

Add to Allow List

Add to Malware Profile, under specific module that triggered alert/incident.

 

It is still showing up in incidents when executed. Any idea what could be going on?

 

jia_xuan by L0 Member
  • 698 Views
  • 3 replies
  • 0 Likes

Resolved! Installing Cortex XDR on a template

Hello,

 

We want to prepare a template with all the installed applications including cortex, to use it in the new installations. How would it be done with cortex, would it be necessary to introduce some parameter in the installation, or with the usua

...

AMSI Byte Array Scanning

Does anybody have a solution similar to Defender for Endpoint for using AMSI programmatically to scan incoming files? Essentially, we have a requirement to scan incoming files that are scanned prior to being sent along to their next hop. This all occ

...

JAEvans by L0 Member
  • 573 Views
  • 2 replies
  • 0 Likes

Resolved! Deploying XDR Agent for Mac with InTune

Hi all,

 

We're trying to bring our few Macs into the systems management fold, and being a Microsoft shop we want to use InTune to manage them.

 

Most Mac packages install files and then are configured in a separate set of commands after install. The XDR

...

m455954 by L0 Member
  • 12359 Views
  • 12 replies
  • 1 Likes

Resolved! check cortex xdr agent status

Hi everyone,

 

I have a doubt

how can I check the status of the cortex xdr service / agent in windows 10 ?

cause my client won't synchronize with server 

Thanks in advance.

 

greetings.

Seka by L1 Bithead
  • 11684 Views
  • 7 replies
  • 0 Likes
  • 1897 Posts
  • 78 Subscriptions
Top Solution Authors
Top Liked Authors