Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Serial Number of endpoints

Hi All,

 

Does the Cortex XDR agent fetches endpoint serial number ?
If yes, where I can find it in the XDR console(Under which field).

 

Thanks in advance !!

MithunKT by L2 Linker
  • 2117 Views
  • 1 replies
  • 0 Likes

Resolved! Alerts retention duration in Cortex XDR

Hi !

Does anyone know how long alerts/incidents will be visible in Cortex XDR ?

In our tenant we have alerts older than 1 year and I was wondering if they disappear after some time or if they will be accessible forever but I can't find this informati

...

rediaz by L0 Member
  • 2229 Views
  • 1 replies
  • 0 Likes

XQL query for hunting MS-DFSNM

Hello dear community, 

 

has anyone of you a XQL Query for this type of attack?

 

https://www.bleepingcomputer.com/news/microsoft/new-dfscoerce-ntlm-relay-attack-allows-windows-domain-takeover/

 

BR

 

Rob

RFeyertag by L4 Transporter
  • 1620 Views
  • 2 replies
  • 0 Likes

Resolved! Not see any information on Host Insights

Hi,

I turn on the Host Insights free trial and not see any information on Host Insights,

when i did that to other customers ther all working well but at this one its not working, what is the problem?

i did calculated again, i turn that on week ago.

Broker VM questions - Tenant switch for agent

Hello 

 

Please share any experience or advice for below situation and how best to approach this .

 

Currently agents are connected to UK Cortex XDR  tenant via a Broker VM installed on premise . Now the need is to use EU Cortex XDR tenant ,this will

...

Balaraju by L2 Linker
  • 1207 Views
  • 1 replies
  • 0 Likes

Security Test / poor result

Hello dear Community! 

Does this result reflect the strenght of PA Cortex XDR?

 

https://papers.vx-underground.org/papers/Malware%20Defense/AV%20Tech/An%20Empirical%20Assessment%20of%20Endpoint%20Security%20Systems%20Against%20Advanced%20Persistent%2

...

Cyber1985 by L3 Networker
  • 1305 Views
  • 2 replies
  • 0 Likes

Correlation Rule for services

Is it possible to create a correlation rule to identify when new services are present on an endpoint

For example,

Create a correlation rule ,using a query that returns all services on an endpoint, that creates a new data set of the results..say there a

...

Resolved! Specific Cortex XDR Alert

Hello PA community ,

 

Please could you clarify a doubt ?

 

In Cortex XDR is there any way to alert if the endpoint is disconnected?

 

From my knowledge . i can confirm that we can retrieve disconnected agent by creating a filter from endpoint administrati

...

  • 1645 Posts
  • 79 Subscriptions
Top Liked Authors