This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4397 Views
  • 0 replies
  • 3 Likes

Resolved! Cortex XDR Linux Service Explanation

Dear Team, I wanted an explanation on the cortex XDR services present on the Linux machine and their role. Needed to know each service functionality mentioned in the below command section like pmd , analyzed , dypd and decryptor.json Name PID User Status Command pmd 20798 root ...

Threat Hunting Scenerios

I would like to set the alert to detect the following scenerios How can I config the XQL/Query in BIOC to detect: Cortex XDR Login of local admin user (user with local administrators privilege) Stop of a windows service e.g “abc.exe” while the endpoint can still be ping or alive Change the status of Cortex Agent, e.g. from protected to unpro...

Incident creation latency

Hi all, I have seen a few cases like that in recent days: There was an alert by name ""Failed Connections" generated by XDR Anaytics" and inside that incident there was only one alert named "Failed connections" and alert source was XDR Analytics. But problem is that, Incident created almost 24 hour after the alert was created. Have you expe...

XQL Query Help

Hello All,I am trying to build a correlation rule for palo alto traffic logs to have local to remote traffic logs but I am unable to put that condition in the XQL query. Can someone please help me with the condition if you have already built one? It will start off like this: dataset =panw_ngfw_traffic_raw _raw |filter <I want Outbound traffic...

Exception with Windows Environment Variable

Dear Community, Seeking for validation. I was under the impressions that we could create exception with the Windows environmental variables. There's recent XDR alert says otherwise, the alert reappeared even after applied the exception. (With Windows environmental variables). However, the alerts no longer generate after modified the exception ...

Resolved! Can I integrate EDL into Cortex XDR with other firewall brands?

Hi, everyone. Could you help me with some questions I have? 1.Can I integrate EDL into Cortex XDR with other firewall brands? If I can, where can I find the manual or guide? I was searching but didn't find anything. 2. To use EDL on Cortex XDR and connect it to the Firewall, what license do I need? Thanks you for yours answer Cortex XDR #EDL

How to get XDR Wildfire API key?

As you can see that there is no data in wildfire api key. So where is it because I want to integrate my XDR Wildfire to other products. So How can i find it or How can I generate it? Please explain me well.

JayeshParmar_0-1705127299496.png
JayeshParmar_1-1705127321137.png
  • 2610 Posts
  • 98 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks