Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Stealing Tokens from Office products

Hello dear community, 

 

is there a capability in cortex xdr pro, which can detect or stop the dumping and stealing from tokens?

 

https://mrd0x.com/stealing-tokens-from-office-applications/?no-cache=1

 

How would you go on this? XQL BIOC query with

...

RFeyertag by L4 Transporter
  • 1746 Views
  • 4 replies
  • 0 Likes

Cordex XDR blocking SQL server connection

Hi,

We are facing error while connecting to SQL server database from our application. We noticed that, once we start the application might be Cordex XDR adding the -agentpath (-agentpath:C:\Program Files\Palo Alto Networks\Traps\cyjagent.dll) in JVM

...

sagar1 by L1 Bithead
  • 4990 Views
  • 8 replies
  • 0 Likes

Kdbx search alert

Hello dear community,

 

Is there a active protection or a passive alert against crawling for kdbx data? 

https://mobile.twitter.com/malmoeb/status/1570814999370801158

If not, has anyone an idea how to be alerted, if someone wants to do some bad thing

...

Cyber1985 by L3 Networker
  • 1083 Views
  • 1 replies
  • 0 Likes

XQL query custom variable

Hi,

I am creating a custom query where I will need to re-use certain fields.

 

Ex.: I want to search for:

-action_local_ip and action_remote_ip

-action_file_sha256 and action_module_sha256

-dst_agent_hostname, dst_action_external_hostname and http_se

...

Resolved! The Logic behind Widgets on XDR

Hello , 

 

Recently we observed that during time period of last 7 days when we use the widget Incidents by source it shows us of a total 7 incidents but when we check manually with the same timeframe it shows us only 6 overall incidents. How does thi

...

NivedaR by L2 Linker
  • 1315 Views
  • 1 replies
  • 0 Likes
  • 1873 Posts
  • 78 Subscriptions
This widget could not be displayed.
Top Liked Authors