Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Submissions to VirusTotal? VT Licence ?

Hello!

 

As I know, samples which are provided to VT, are "lost" in the endless VT world. VT can do with the files what they want. (Sharing, etc.). 

When we connect Cortex XDR with VT, what will be transfered to VT? 

What are the limitiations with Cortex

...

Palp alto TRAP XDR cortex

Is it safe to install paloalto cortex XDR solution?

If we install in our premises then our client machine data may get compromised if cortex scan for  malware on cloud. Then what is the use of proxy broker server. I want my data must be safe and it sh

...

Whitelist IP from XDR anlysis

Hello,

 

We would ike to know if it is possible to create a list of IP's that will not be analysed by any of the XDR protection modules.We have a vulnerability scanning tool that uses all sorts of scripts to perform its tasks, At the moment, most of th

...

Resolved! Ingest Logs from Cisco ISE to Cortex XDR

Hi 

 

Anyone successfully ingest logs from Cisco ISE to Cortex XDR via syslog?

 

I've activated the syslog collector of broker VM for TCP514 and format set to auto detect, following this documentation, and configured the Cisco ISE to forward the logs to

...

weejh_0-1647926849547.png
weejh by L1 Bithead
  • 473 Views
  • 4 replies
  • 0 Likes

Resolved! I found many event about "EDL Authentication fail" on Management Audit log at Cortex XDR console since Mar 17,2022 until now.

Hi ,

 

I found many event about "EDL Authentication fail" on Management Audit log at Cortex XDR console since Mar 17,2022 until now.

But I didn't enable EDL why I got this event that was generate every minute . Please advise how to clear this event .

 

Th

...

'Hijacked DLL Injection' alerts

Greetings ,

 

The single most common and repeating alert which we are getting is like below :

'' 173 'Hijacked DLL Injection' alerts detected by XDR Agent on 24 hosts ''

Explanation is 'DLL attempted to load from blacklisted location' .So 2 questions her

...

Balaraju by L2 Linker
  • 529 Views
  • 5 replies
  • 0 Likes

Resolved! Threat ID #9999' generated by PAN NGFW

Hello,

 

I have turned off alerts on NGFW for Private URL, but I still get threat ID #9999. 

 

Can somebody a little bit more explain what this threat ID means? I am trying to clean it up, but still get these alerts.

And it is not any kind of malicious tr

...

LukasB by L1 Bithead
  • 1000 Views
  • 4 replies
  • 0 Likes

API Pagination

Hi community, I am new here.

 

I am trying to integrate the Cortex XDR API for incidents into Azure Sentinel using the new Codeless Connector Platform (CCP).  The challenge I have is that the Cortex API doesn't appear to have any indicator as to where

...

Phil007 by L0 Member
  • 364 Views
  • 3 replies
  • 0 Likes