Cortex XDR Agent Driver Shutdown on Windows 11 22H2

Hello Team,

We have received an advisory for Cortex XDR Agent Driver Shutdown on Windows 11 22H2. Its was recommended that to pause any planned upgrades on endpoints running the operating system Windows 11 22H2. 

It was also mentioned that a new

Compatible Check

Hello Team,

Can you confirm whether the Broker VM appliance compatible with cortex XDR.

how to suppress the prompt "Cortex XDR" would like filter network content"

for the Macs, how does one configure Cortex to suppress the display of this prompt (see attached), and just automatically use 'Allow'.

Ive tried calling up com.paloaltonetworks.cortex.app.plist, but I don't see an obvious key pair where this behavi

To find the hashes of the applications through XQL search

Hi team,

is there a query to get the hashes of the applications installed in host inventories or any other way ?

Wildfire Test File

Has anyone had issues with the Wildfire Test file not showing up as an alert in the cloud? On the workstation it's getting blocked just fine. I haven't had a regular alert fire in about 2 months. Just wondering if I have an underlying communication i

Limitations Cortex XDR Pro with Threat Intelligence Feeds

Hello dear community, 

I'd like to know more about how you fill your IOCs in Cortex XDR Pro. 

There are so many TI Feeds outside:

https://www.comparitech.com/net-admin/best-threat-intelligence-feeds/

I'd would prefer the low cost variant (XDR P

Cannot Install XDR Agent Because ./setup.sh Permission Failed

I tried to install XDR Agent on my Redhat VM. After I changed my installer file permission and run the script, it said ./setup.sh: Permission denied.

i already checked my file permission and theres nothing wrong with it.Is there someone have the same

Does cortex XDR use Apache HTTPD 2.2.15 for communication

Hello Team,

Does anyone has idea about the protocols that cortex XDR used for communication.

Does Cortex XDR uses Apache HTTPD for communication?

Cortex XDR 

Network Traffic analysis

Can Cortex XDR identify or be used to identify unsually high network traffic and if yes can it/we eventually throttle the requests using XDR ?

Notification if Cortex XDR agent fails to upgrade

Is there any sort of notification I can setup within Cortex XDR to notify me if any agents are failing to properly upgrade to a new version on our endpoints?

Thanks

Detect where a process has been killed

We have a scenario where users are able to kill a certain process to bypass security.

How can we leverage XDR to detect where the specific process name has been killed and, ideally, prevent it?

I thought maybe an IOC or BIOC but the IOC doesn't seem

Cortex XDR service getting stoppage on machines

why the Monitoring agent service getting stopped on Hosts. When we checked the logs of some machines we got this error " XDR service cyserver was stopped on ABCDdesktop. Could you please explain