This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4322 Views
  • 0 replies
  • 3 Likes

Resolved! retrieve RDP informations

Hello and sorry for my bad english, I want to retrieve informations about RDP connection to computers. When computer A connect to computer B with RDP, on computer B (destination) windows log this event :Event Security with ID 4624 et logon type 10How by query builder retrieve this information on all computers ?thanks a lot

LECORRE by • L0 Member
  • 2710 Views
  • 2 replies
  • 0 Likes

Cortex XDR Software Inventory

Hello, I am curious as to what data Cortex XDR pulls to put together a software inventory list. I am trying to create a script to uninstall a program on an endpoint and the last resort method the script does is deleting all program files (both in Program files folder and the user's appdata folders) and deleting all registry keys in the HKEY_LOCA...

Turn on Bitlocker?

We are in the process of rolling out Cortex XDR to our organization. I saw the new BItlocker status screen/policies.I'm struggling to understand if I can enable Bitlocker with this policy, or if this is just a way to ensure the devices are complaint with the way we want Bitlocker configured? We were previously using our AV company's encryption p...

pkawula by • L1 Bithead
  • 13501 Views
  • 9 replies
  • 0 Likes

Cortex XDR linux memory usage

Hello , Can someone please help me to understand the Cortex XDR logs for memory usage by cortex XDR service. below are the consumption details in logs. "trapsd_memory_private_usage": 606146560, "trapsd_memory_working_set": 4232118272 which memory it represents and how to know the consumption. Cortex XDR

Resolved! How to retrieve an incident related file

Hi, I want to download an incident related files in Cortex XDR, but one of them is already quarantined so when I try to retrieve it nothing happens since it's not in the original location anymore. Is there any way to download it without restoring it from quarantine?

Upgrading from Cortex XDR prevent to XDR pro

Hi All, Finally we will be upgrading our Cortex xdr prevent to the pro version. Though we would be getting professional services support on this, I need to understand the entire project plan for this Can anyone help me understand as I would be leading this in my organization.I need to know the prerequisites , the actual process, and post upgrade...

AsifSid by • L2 Linker
  • 7874 Views
  • 3 replies
  • 0 Likes

Resolved! IOC Upload through API - Security Level Advanced

Hello dear community, my ps script is ready to upload IOCs with least privilege. But I want to know, what kind of security risks we have if we don't use the Advanced security level? Has anybody of you a ps snippet where the api key is hased like it is required? additionally I found this example, but not in ps, just only python 3: from d...

RFeyertag by • L4 Transporter
  • 2950 Views
  • 2 replies
  • 0 Likes

Cortex XDR XQL query

Hi Community, We have multiple Palo Alto firewalls configured in Cortex XDR. How can we check the number of firewalls currently logging into Cortex XDR? Additionally, how can we verify the names and IP addresses of the configured firewalls using a check method for XQL queries?

CrowdStrike XDR Use cases with Pala Alto Cortex

Hi Team, Can you please suggest a few case studies where CrowdStrike XDR is integrated with Cortex SOAR and what were the areas and use cases that were implemented and helped the customer? We wanted to present this to a management that already has crowdstrike XDR and we want to showcase how cortex SOAR can help.

AYadav45 by • L0 Member
  • 1427 Views
  • 1 replies
  • 0 Likes

Cortex XDR Periodic Endpoint Scanning schedule

We have a new compliance requirement to Perform periodic scans of the system at least every 72 hours and real-time scans of files. We currently have the schedule set to scan weekly. But I do not see the option to scan more frequently. Is there a workaround to increase the frequency of periodic scanning? Cortex XDR

  • 2589 Posts
  • 95 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks