Resolved! Cortex Scanning

Hi, I'm looking at doing a review on our Cortex policies and we currently have weekly scanning enabled. I know scanning for Cortex is not a traditional antivirus scan, but more for creating a benchmark for your endpoints.

After it does a scan, alerts

Resolved! timestamps for suppression rule (BIOC)

Hello everyone,

I need your help because I want to create a BIOC deletion rule, I have the hash, the username and the path but I would like this deletion to be effective during a specific time slot, can it be configured?

Resolved! Block Exe Files in User Download Folder

Hello,

i know that i can block specific files in cortex but i am looking for a solution how i can block only .exe files in Users download folder.

In the Malware Profiles i can see that there is only a allow list where i can write single filenames t

Resolved! Network Configuration Module

Hello,

What exactly is the use of the feature called  active assets and active managed assets in the IP ranges section under the Network configuration module.

Resolved! XDR Scan

Hello,

1. If we create a policy related to scanning of endpoints and apply that policy in all the machine and run it on all the machine at the same time. Is it this method possible? Will it create any issue?

2. Pop up messages to users for malicious

Resolved! Which one is better between cortex XDR host firewall and windows firewall ?

Hi All,

Is it a good idea to enable the XDR host firewall to manage all endpoint communication? or is it better to keep the default windows firewall enabled without using the XDR firewall?

I would be happier if someone suggests any article/docume

Resolved! Cortex XDR Broker VM handling

Hello dear live community! 

We are now at the step where we connect some Servers to Cortex XDR which should not connect directly to the Internet. 

In the first mind we talked about the Tier 0 server. Today I was asked why we cannot bring all the se