Cortex scan report

Hello all,

I am a new user of Cortex XDR and I noticed that upon scanning a host, the malicious files identified by the scan are so difficult to find. I was expecting a proper scan report, where I can actually see the name and path of the identifie

XQL Query Assets XSOAR

Hi everyone,
I need your help.
I'm trying to create a CMDB using a playbook in Cortex XSOAR  , pulling data from the Cortex XDR tab Asset Inventory (XDR-managed devices as well as others collected via mappers and IoT firewalls).

My idea is collect all a

Cortex XDR to block specific powershell script

Hello Team,

I have a script that I would like to block across the entire estate.
Is there a way to achieve this in Cortex?

Thank you.

Detect user who moved a folder using XDR and XQL

Hi everyone,

I need help identifying which user moved a specific folder from a network share to another location. The only information I currently have is:

• The old folder path (e.g., \\server\share\oldfolder)
• The new folder path (e.g., \\server\users\

Cortex XDR "The target location already contains a file named" problem

Hi, 

I have a problem after installing the XDR Cortex agent.

Windows 10,11. When trying to copy any file to the network share (Synology), which was created on the workstation after the agent installation, I receive the message "The destination alread

Full disk access requirement on macos agent

Hi team

A couple of questions here:

1) Is full disk access required for agents running on macOS Sonoma and Sequoia?

2) What is the meaning of "Requires full disk access: False" in the "cytool status" output? (screenshot attached)
The endpoint we

HELP With XQL Query to fetch All Assets

Hello Everyone, 
I want to fetch all assets from asset inventory using XQL query but I am unable to find a suitable dataset for it. Can someone please help with XQL Query to fetch all the assets. 

Thank you 

Cortex XDR 

Excluding Pentera Box

I am looking to make an exclusion or suppression of some sort for alerts generated by our Pentera Security Validation Tool. I have a SSL certificate loaded into Pentera so I can filter by that certificate if I can. However for the Vulnerability Scans

Configuring Exceptions for Different Modules

Hello guys

I need to add exceptions for Windows HyperV servers.... and I have 2 questions:

Question 1

I need to add exceptions base on extensions...*.bin, *.vhdx, *.avhd.... etc, and exceptions base on process for instance Vmms.exe, VMwp.exe...

Problems updating the agent

Hello colleagues!

I'm having trouble updating my agents to versions 8.7 and 8.8. The current versions are 8.5 and 8.6.

When performing the update, the following error appears:

"The content package was faulty or could not be downloaded."

Check