Hello,
How to change agent password in cortex XDR for few servers and endpoints not for all the agents.
Regards,
Shashank
Hi all,
I try to run registry_get in the action center, but always fails to run.
I check the administrator guide
and learned that doesn't seem to work when running specific hives (e.g. /HKEY_CURRENT_USER/ )
So I try to get some registry information
...
On Windows 11 with both Cortex 7.9.1 and the most recent 8.0 version when users use the Snipping tool to take a screenshot, the whole computer freezes and only the mouse works, users have to CTRL-ALT-DEL and logout to get working again. When Cortex X
...
Investigating detected alerts for alerts up in XDR.
I want to know reason detected using support files.
Would you please kindly how to getting detect a reason it.
Hi,
I need to create a XQL or something in Cortex XDR, where I get IP address from O365 logs and check if match with IOCs I have in Cortex XDR.
Could you help
Regards,
Fábio Ferreira
Does Cortex XDR provide protection against the Double DLL Sideloading to evade detection?
https://www.bleepingcomputer.com/news/security/hackers-start-using-double-dll-sideloading-to-evade-detection/
Hi All,
We have received an update regarding the 7.9.100 CE hotfix for cortex xdr agent.
Can someone please let me know whether this update fixes the upgrade failure of windows 7 Operating system or upgrade failure of cortex xdr agent. Also, is i
...
Good Day,
I am fairly new to Cortex but have been looking to detect git related activity not associated to Github. I believe I have a decent grasp on the volume as well as the observed destinations. I am running into issues differentiating what ini
...
We are running into issues when we need to provide exceptions for command line for Child Process Protection, and it is a struggle even when it is supposed to be a simple wildcard use.
Has anyone run into this issue or have tips on how to go about
...
Hello,
I used Cortex XDR for Endpoint Security, but I would like to know if XDR can identify and report user activity and time spent on it.
Thanks.
Hello!
It's been awhile, since I registrated a Broker VM, but this time I only get these errors:
Failed on activate request (connection error) with exception: HTTPSConnectionPool(host='distributions.traps.paloaltonetworks.com', port=443): Max retri
...
we want to create a group on the cortex console but we have the below concern
Hello,
In my last post I was asking if Cortex XDR was able to block USB network connections and the answer was that by default not.
However thanks to the solution I was able to find a settings that lets you add a new device for device control modu
...
Will the process rule builder accept Powershell commands? or only Windows command line?
Hello,
i am trying to configure a new profile, and i wanted to know if it’s possible to blocked accessing network shared folders and mounting network shared folders.
Best Regards,
Cortex XDR
