Operational status unprotected with error message running without valid content

Related to Cortex XDR

we are observing operational status as unprotected for some endpoints and the error says running without valid content.
But at the same time we also observed some of the agents running on the the latest agent version also having

Pop-up Blocked Alert Not Displaying Blocked File

Hello,

A client received a pop-up blocked alert because a suspicious executable was found on their machine. When the client went to view more details, the executable that was blocked was never displayed in the details information. Why is that? By t

Cortex XDR agents upgrade

Hello everybody,

Is Cortex XDR agents auto upgrade recommended? We enabled agent auto upgrade at the moment. But we worry this can cause some problems in future.  Can anybody give suggestions about this situation?

Thanks.

[Network location] - too long to check location

Hi community,

Does somebody is using Cortex XDR - Network Localtion (from agent settings profile).

My problem is that the network location is too long, specifically when users comme back to our office from their own internet connection, internal

Install on Windows 10 Enterprise IoT with UWF enabled

Has anyone installed XDR on windows 10 or 11 running UWF.  I am assuming I need to exclude some folders to make it work properly?  I thought I saw something but not having any luck.

Cortex XDR - New Widget

Hello,

Can we create a widget with regards to endpoint tag and number of agents?

Signer of a file in file operations

Hello dear community, 

like I saw, there is no possibility to find out the signer, from files which were only downloaded, moved, etc. but not executed. 

Why is this not possible?

BR

Rob

Cortex XDR not detecting malicious files

Hi ,
Why Cortex XDR is not detecting malicious files which are present in system.
for testing purpose I have downloaded a test malware also but it is not reflected after the malware scan.Can anyone please give clarity on this.
Does Cortex detects malici

Block logs to Data Lake from specific endpoint

Hello,

I have a case where logs are delivered to Data Lake from endpoint were we're unable to uninstall Cortex XDR agent. We also can't connect to this endpoint to take manual actions to stop receiving logs from it.

Is there any way to block/preven

Stopping Python Execution will affect Cortex XDR py scripts functionality?

Hello dear community!

I want to stop every python prozess with an bioc. 

Will this also affect the script functionality from the Cortex XDR Pro agent?

BR

Rob

Endpoint Operational Status

Currently, our devices are unprotected state and partially protected state due to disk consumption. 

Is the data in the cortex xdr incrementive or does it delete itself after sometime ? 

What is the possible solution for this issue ?

How do we diff