Webhooks

can we create webhooks on cortex xdr

Certificate Enforcement issue

We have several machines that are now reporting "Partially Protected" when we enabled Certificate Enforcement on them. 

First they started to show "Local-Store fallback used" in audit logs (informational severity), now we see "Failed to enable cert

Failed to get unit file state for traps_spmd.service: No such file or directory

Hello,
I just installer a 8.2 XDR agent to a linux server
"/opt/traps/bin/cytool startup enable all" returns 

Process name Startup status
pmd Enabled
Failed to get unit file state for traps_spmd.service: No such file or directory
spmd Disabled
Failed to ge

Monitor bitlocker

Hello,

I am checking if it is possible, to monitor from cortex when BitLocker is enabled on the computer, via a BIOC?

Best regards.

XQL Query - File Delete Action

Hi,

Please may i know if anyone may have the issue i encounter since early May 2024? 

1. Delete a folder (100+ files) from specific endpoint (right click mouse and select delete)

2. From Cortex XDR Query Builder - File Query and Select Action = Delet

XDR Query Builder

Hi,

I'm trying to use Query Builder but unable to get any results. see also attached screenshot.

But when I perform a XQL search with query "dataset = endpoints" it gives me results.

What should be done so I can use the Query Builder?

thanks

Cortex on iPhone

Hi everyone,

I have a few questions:

1. I installed the Cortex app on my iPhone and allowed all the required permissions, but every time I close the app (swipe up), it stops working. The Cortex app is terminated, and the agent is not running. Is there

Tag based widgets in Cortex XDR?

Hi all,

We've started using Cortex XDR this year, and I currently see some limitations on the reporting and dashboard module. We're using tags to keep track of our endpoint, and we are looking to create reports based on tags. 

Basic example, I want a

Hip Object

I have an mdm on my corporate smartphones, how do I add it to the hip object so that users can only access the internal network if they have the mdm installed?

Cortex XDR API get_endpoints vs get_endpoint

Hello,

I've been using python script to get all endpoints /public_api/v1/endpoints/get_endpoints

(https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Get-all-Endpoints).

Recently there was another business requirement to get OS type of

Cortex Xdr o365 compliance email

hi

 we integrated o365 API with cortex we have concern 

what it will do it will do anything?

what is the use compliance mail it block spam or malicious attachment