we want to create a group on the cortex console but we have the below concern
Hello,
In my last post I was asking if Cortex XDR was able to block USB network connections and the answer was that by default not.
However thanks to the solution I was able to find a settings that lets you add a new device for device control modu
...
Will the process rule builder accept Powershell commands? or only Windows command line?
Hello,
i am trying to configure a new profile, and i wanted to know if it’s possible to blocked accessing network shared folders and mounting network shared folders.
Best Regards,
Cortex XDR
Would like to request new feature development / Host Insight module improvement to have Vulnerability Assessment (Cortex XDR) with respect to minor builds? The issue is described in https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u
...
As a valued member of our Cortex XDRcommunity, your opinion is important. The Cortex team would appreciate if you'd share your experience with Cortex XDR on Gartner Peer Insights by writing an Endpoint Protection Platform (EPP) review.
Reviews are a
...
Hi,
I'm trying to run the following to run the following query in Query Builder:
The query itself contains the command:
"del *.log /a /s /q /f"
I was wondering if there is a way to escape the asterisk character after the "del. " part of the comma
Hi,
I'm curious as to why the Cortex XDR Data Lake is under PA Hub Gateway Applications, but Cortex is not.
Thanks
Dear All,
I need your help and advise to acheive the below requirement in XQL query.
1. Agent malfunction/ no content updates/ no upgrade
2. Agent partially protected/memory storage/junk storage
3. Network malfunction, not able to connect back.
...
some of the agents its showing connection lost any solution for this we already installed the agent but we need the root cause
I did some network troubleshooting on an endpoint at 9am and then saw an alert that could be related, or could be malicious... but it came in at 6:30pm.
If Cortex alerts are always real-time then my response to the alert will be totally different tha
...
Hi,
Can we get real time compliance report of endpoints which goes under disconnected and connection lost state at that time only
or can we create any rule by XQL query, when the systems are going in disconnected and connection lost state.
We're currently encountering problems with some of our endpoints as our agents are not upgrading. Do you have any suggestions on how to resolve this issue? and its support acs signature
Hello,
We are experiencing high disk space and high memory utilization on servers .
How to stop endpoint data collection in cortex xdr?
Can we delete data from traps folder?If yes what all files we can delete ?
How can we lower disk space utilization
...
