Cortex XDR integration with IBM QRadar

Hi All,

We have a requirement to get cortex XDR Data(Alerts, agent audit logs) into IBM Qradar. Following the documentation, we took the approach of configuring syslog server in external applications, new configuration in notifications, and adding Co

XDR Baseline document

Hello,

Please help by providing XDR configuration baseline document.

We require doument for review of XDR.

Regards,

Shashank

Vulnerability Assesment

Hello Team,

1. How frequently CVE's are added to the XDR Console?
2. How PaloAlto addresses Patch Tuesday CVEs ?

Compatiblity Check2

Hello,

Please confirm us if XDR can be installed on below BrokerVM servers.

windows updating checking in cortex console.

Hi Team,

On cortex console can we check what windows update installed on the endpoint?

Cortex XDR service getting stopped

why the Monitoring agent service getting stopped on multiples Hosts. When we checked the logs of some machines we got this error " XDR service cyserver was stopped on avd*** ". Could you please explain 

High resource consumption

We have enabled cortx xdr in report mode and there is a constant high consumption of resources (CPU and Load Average) which causes problems in the machines. Does anyone know what feature usually consumes a lot of resources when enabled and causes the

Notification to user if thier machine is isolated

Hi,

We want the user to get notified if their system is being isolated throught XDR.

Please provide the steps to do the same.

Thanks

Cortex XDR content update

Hi Team,

How to check and find cortex xdr content update release date? Cloud portal only showing the version and how to manually push the content update to some selected endpoints?

Host Firewall disabled

What impact it shows on the machines when the Host firewall is Default(Firewall disabled) selected on any Group.

Vulnerability

Hello,

Can we know how frequesntly are new vulnerablities added on XDR? 

How XDR's vulnerabilty assesment can be used to address vulnerablitlites?

CVE IN PALO ALTO CORTEX XDR

Hello,

How many CVE are updated by Palo Alto Cortex XDR?

IOC Upload automation in Cortex XDR

Hello dear community,

Has anyone of you a ready to upload script for IOCs to cortex XDR (directly) from a file? Could you share it? 

How and where do you handle the doublettes? 

BR

Rob