Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 719 Views
  • 0 replies
  • 2 Likes

Kandji MDM

Hello everyone,

Over the last two months we are having constant issues with Cortex and Kandji playing nice together. Before that everything was working without any issue for at least half a year, if not longer.

What happens is the following: Kandji g

...

JosipS by L0 Member
  • 1078 Views
  • 1 replies
  • 0 Likes

Question about XQL to make a BIOC

Hello,

 

I'm trying to make a BIOC to inform when a SSH conection is made in some critical assets, but I'm not able to do it in XQL, I have done it using the interface.

 

Network Connections AND Destination [ Remote port = 22 ] AND Host [ Host Name =

...

Resolved! Cortext XDR exclude alert functionality

Greetings,

on the alert page:
For the right-click / manage alert / exclude alert

what is the function of the "exclude alert"
is it based on the alert name ? host name ? process?

what are the way to look at all the previous "exclude alert" 
and how to undo

...

SHAIKHR by L0 Member
  • 1472 Views
  • 2 replies
  • 0 Likes

Resolved! Malware Scan Results Vs Alerts Created

Hi,

I'm just wondering if someone can help me understand, why  the results of a malware scan (i.e. 19 malicious files found) doesn't reflect the amount of alerts created. I'd assume there would be 19 malicious files as stated, with an alert for each?

...

BojanTotic_1-1696977019013.png
BojanTotic_2-1696977165798.png
  • 2276 Posts
  • 86 Subscriptions
Top Solution Authors
Top Liked Authors