Compliance Processes for Cortex XDR

Hi Team,

Our internal team is going to enable the feature “Secure Compliance Check” for end users who are working from home. They have enabled feature for other AV solution. Also we want to add the service for "Cortex XDR". There are multiple servi

Learning Behaviour of Cortex XDR

Hello,

We know that cortex XDR takes atleast one month to learn behaviour and then not throw similar alerts.

1. On what basis is this behaviour learning happening upon?

2. Is it based on just the Host or initiator processes that are taking place?

3

Can someone give an example of get_endpoint that works?

I tried 

$payload = '{"request_data" : {"search_from" : 0,"sort" : {"field" : "last_seen","keyword" : "desc"},"filters" : [ {"field" : "endpoint_id","value" : [ "connected", "connected" ], "operator" : "lte"}, {"field" : "endpoint_id","value" : [ "co

Pull data from XDR through API

Hello,

Is there a limit to pull data from  XDR through API?

I understand that query through API has limit but what if we are pulling endpoint information/alerts/incidents through it?

Agent Cleaner

Hello,

Where can I find the agent cleaner file for agents(servers and workstations) running on 7.7 agent version ?

Cortex XDR quarantined Chrome

Anyone else running into this today?

Prevention Information:
Prevention date: Wednesday, February 8, 2023
Prevention time: 1:36:40 PM
OS version: 10.0.22621
Component: Hash Control
Cortex XDR code: C0400055
Prevention description: Suspicious executable

How to Install and Uninstall Cortex XDR?

Hello,

Can you please help with documentation or steps on how to uninstall and install Cortex XDR in servers and workstations?

XDR Broker VM Security: Antivirus Scan/Software and Audit Log Reporting

What is the recommended practice for collecting XDR Broker Virtual Machine logs and sending them to a central repository and performing anti-virus scans?  I was advised not to install any software on the Broker VM and if I cannot install software on

CDL and Rapid7 InsightIDR, new API method?

Is anyone using the "new API method" R7 references?

https://docs.rapid7.com/insightidr/palo-alto-cortex-data-lake/#New-API-Collection-Method-now-available-as-of-January-2023

Compatibility of Linux OS on Cortex XDR

Hello,

Is Linux AIX , Solaris and Power Linux compatible with Cortex XDR.

How can i block user to connect wifi using Cortex

We were using Symantec to block user's to connect Wifi. But using Cortex how can i block the wifi.

Can someone advice me on this. 

Thanks