Deploying XDR Agent for MacOS with Microst InTune

Hello,

Found several threads on this topic, but no clear solutions.
Do we have en working solution with a clear description ?

Cortex XDR + CDL - Raw Log file integrity and tamper protection

Hello,

I have been digging through various Cortex documentations to find explicit language around log integrity, tamper protection of logs from administrators. I am aware that RAW Logs are not accessible to tenant admins however, could you point me i

'Hijacked DLL Injection' alerts

Greetings ,

The single most common and repeating alert which we are getting is like below :

'' 173 'Hijacked DLL Injection' alerts detected by XDR Agent on 24 hosts ''

Explanation is 'DLL attempted to load from blacklisted location' .So 2 questions her

XDR flags Chrome as malware on ubuntu endpoint

Hi folks, got a problem that i would like som input on.

I have an ubuntu endpoint with a xdr agent installed. said agent has given me a high severity alert about several items on this ubuntu endpoint - Kite(which, seeing how kite can install itself au

API Pagination

Hi community, I am new here.

I am trying to integrate the Cortex XDR API for incidents into Azure Sentinel using the new Codeless Connector Platform (CCP).  The challenge I have is that the Cortex API doesn't appear to have any indicator as to where

upgrading endpoints from the Cortex Console, 50% success rate. spot checks show "Upgrade by SAM failed"

Hi Everyone,

we have been trying to upgrade some endpoints from 7.2.2 to 7.5.1 but the success rate on the first push was 50%.  on the second push again 50% on the left overs from the first push.   the logs are showing ""Upgrade by SAM failed"

2022/0

Completely silent XDR install command line switches.

Looking for some insight on how to automatically accept the license during agent installation.

deploy broker vm proxy configuration

hello, 

i want to install cortexXDR throught SCCM on my servers but i'm facing an issue with setting the proxy parameters also to type the confirmation password.

How it's possible to do it?

any help please?

BR.

Cortex XdR

Is it possible to set a policy for the file size  in cortex Xdr /Cortex Xdr pro? 

Requirement: The limited size(configured size if possible to set policy)  of file can only be shared between the endpoint 

Create a BIOC that doesn't allow a specific folder to be created

Hello,

i want to create a rule that prevent anyone from creating a directory with a specific name in C:\

for example: if we say the folder is named coffee, i don't want this folder directory being created "C:\Coffee" .

i tried to created it, but i could

Cortex XDR agent is not communicating to console. We are checking from setting up proxy on linux agent but geeting error.

Cortex XDR agent is not communicating to console. We are checking from setting up proxy on linux agent but geeting error.
(./cytool proxy set ......)
RpcClient: SendRequest: Error 14: failed to connect to all addresses
RPC call for proxy command 'query'