Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Cortex XQL Query

Hi Guys,

 

Sort of new to XDR does anyone have any good xql queries for detecting assets without cortex agents installed and if the cyserver service has stopped working?

 

Thanks

 

System Lockdown with XDR

Hi Folks,

 

With Cortex XDR can we use feature like System lockdown, more likely say that execute only allowed application and rest all blocked.

 

It is possible?

 

Cortex XDR 

 

Regards,

Mansoor

Resolved! Cortex Agent and PostgreSQL Server

Has anyone installed a Cortex Agent on a high performance database server such as PostgreSQL?  We are reaching the point in our rollout where we will need to decide if this is something that we can do without negatively impacting the performance of o

...

Resolved! Serial Number of endpoints

Hi All,

 

Does the Cortex XDR agent fetches endpoint serial number ?
If yes, where I can find it in the XDR console(Under which field).

 

Thanks in advance !!

MithunKT by L2 Linker
  • 2219 Views
  • 1 replies
  • 0 Likes

Resolved! Alerts retention duration in Cortex XDR

Hi !

Does anyone know how long alerts/incidents will be visible in Cortex XDR ?

In our tenant we have alerts older than 1 year and I was wondering if they disappear after some time or if they will be accessible forever but I can't find this informati

...

rediaz by L0 Member
  • 2326 Views
  • 1 replies
  • 0 Likes

XQL query for hunting MS-DFSNM

Hello dear community, 

 

has anyone of you a XQL Query for this type of attack?

 

https://www.bleepingcomputer.com/news/microsoft/new-dfscoerce-ntlm-relay-attack-allows-windows-domain-takeover/

 

BR

 

Rob

RFeyertag by L4 Transporter
  • 1683 Views
  • 2 replies
  • 0 Likes

Resolved! Not see any information on Host Insights

Hi,

I turn on the Host Insights free trial and not see any information on Host Insights,

when i did that to other customers ther all working well but at this one its not working, what is the problem?

i did calculated again, i turn that on week ago.

Broker VM questions - Tenant switch for agent

Hello 

 

Please share any experience or advice for below situation and how best to approach this .

 

Currently agents are connected to UK Cortex XDR  tenant via a Broker VM installed on premise . Now the need is to use EU Cortex XDR tenant ,this will

...

Balaraju by L2 Linker
  • 1233 Views
  • 1 replies
  • 0 Likes
  • 1736 Posts
  • 78 Subscriptions
Top Liked Authors