Hello,
Can we change authetication options while logging in to cortex xdr?
While logging in first time on cortex XDR we selected google authenticator but mistakenly google authenticator app got deleted from phone and after re-installing it is una
...
Hi
How I create a new user in Cortex XDr and assign him the "Security Admin" role?
thx
Hey there,
I need some help with a query please.
I want a query that returns instances of two events, but ONLY when the events do NOT occur within 2 minutes of each other.
dataset = xdr_data
| filter (event_type = ENUM.PROCESS and event_sub_type =
Hello,
anyone know what the compatibility of Windows 11 and cortex v7.4x and v7.5x
Unit 42 has posted a threat brief detailing the attack, IOC's, and product mitigations. We will continue to update the brief as we get additional details or expanded product mitigations. The brief can be found here https://unit42.paloaltonetworks.c
...
Hi,
we are getting multiple alerts from one particular Device. The alert name is Recurring access to rare IP, we checked the alert nothing has been suspicious, all are legitimate processes. still we are getting fatigue alerts. Guys, can you give some
...
Hi,
According to the Cortex Helpcenter Cortex XDR Agent version 8.0 should support Windows 7 SP1:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.0/Cortex-XDR-Agent-Administrator-Guide/Cortex-XDR-Agent-for-Windows-Requirements
But when tryi
...
Can we view application ,web browser activity on support file and how to open support file
Hi Team,
Anyone having detection logic XQL query for CVE-2023-23397 - Microsoft Outlook EOP ? Cortex XDR #DetectionLogic #XQL #ThreatHunting #CVE-2023-23397
Thanks,
Gokul K
I have gotten managed firewall onboarded but even after a cert fetch panorama still does this any idea's
This is more from how people are hunting with different EDR tools, so just throwing out something with XQL to the community which might be helpful for us all:
Note: All of the below queries are created from an environment which does not uses 3CX so
...
Hello,
Is there further documentation on what the required permissions and API key needs for the File Retrieval action?
https://cortex-panw.stoplight.io/docs/cortex-xdr/058f77d40dd35-retrieve-file
We have a provisioned an API key and gave it al
...
Hi,
Good day!
Can you please tell me if we have a chance to check the application and websites which we have used in the recent time in the endpoint using the cortex XDR console?
Hi,
We're using the autoupgrade feature in the Agent Installation profile at the moment to upgrade our agents to the latest 7.9 client. We're looking at moving up to version 8 shortly, I've upgraded a group of test machines and all looks good. We
...
