This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Start a conversation

Welcome to the Cortex XDR Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4496 Views
  • 0 replies
  • 3 Likes

Disk Decryption on MAC OS

Hi Everyone, I'm seeking for help on how to decrypt the drive on MAC OS after the encrypting the drive using the Cortex XDR Tenant/Console? I tried to check and use on this documentation guide by Palo Alto Networks but I think it is not working or do I miss something. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Admin...

EJaspe by • L1 Bithead
  • 2069 Views
  • 3 replies
  • 0 Likes

XDR and XSOAR mirroring fails

Hi, I have XDR integrated with XSOAR for bidirectional incident mirroring... The strange thing is that when I close incidents in XSOAR as false positives, they appear as 'Resolved other' in XDR via the API...If I close incidents as false positives in XDR through an automation rule, they remain open in XSOAR... Does anyone know what this migh...

tlmarques by • L4 Transporter
  • 1884 Views
  • 2 replies
  • 0 Likes

Resolved! exclusions vdi non-persistent

Hello, does anyone know if there is any document that tells us which folders and subfolders we should exclude from XDR when using Citrix and VMware Horizon with non-persistent VDI? In Palo Alto's documentation, I don't see anything specific except for the app layers. However, both Citrix and VMware request the exclusion of many folders from th...

tlmarques by • L4 Transporter
  • 4054 Views
  • 3 replies
  • 0 Likes

Resolved! How to use two datasets in a query

Hi, I hope you can shed some light. I am attempting to run a query to find out what system is running what applications including the username. I have this query which gives me what I need except the "user" which is a field in another dataset xdr_data. How can add this new dataset to get the "user" field? Thank you config case_sensitive = fal...

Application Severity Score

Hi, I noticed a "Severity Score" in Applications under Host Inventory but there doesn't seem to be any scoring happening. Is this apart of a license we may not have or does this not function the way I would imagine? I assumed maybe CVEs for applications would be listed here.

DopedWafer_0-1700080391735.png

AWS tags in the Cloud info field?

We have hundreds of AWS assets with lots of information in Cloud Info, but none have anything in the tags field. Has anyone else seen (not seen) this?Just to clarify, I am not talking about Cortex XDR tags. Thanks

PCTomS_0-1697840876761.png
PC-TomS by • L3 Networker
  • 1699 Views
  • 3 replies
  • 0 Likes

User details

Hi Team, Can we check user details on the XDR console - Local user with admin privileges? Any way to identify such users? Regards, Shahwaz

XDR on Linux Appliances

Hi All, Can XDR be installed on these servers - Checkpoint Force Point DLP Protector Cisco Expressway Trend Micro - Smart Protection Z Scaller Application Trellix-NDLP Thanks, Shahwaz

XDR AV Scan Alerts/Incidents

Hello Team, During AV scan, everytime we are recieving cache file is detected from the different hosts and filename and Hash is same. The file verdict is Benign. Help me how can I address this file. As it is a temporary file.

Your Cortex Data Lake integration with Cortex XDR is about to expire

We received a Cortex XDR email with the message: "Your Cortex Data Lake integration with Cortex XDR is about to expire. To avoid any data loss, it is recommended that you copy your device configurations directly into Cortex XDR" There was also a similar warning message that had a link to manually migrate which took me to Configurations > Da...

Cortex Data Lake integration with XDR Expiration.JPG

Not able to define new uninstall password

Our XDR agent uninstall password suddenly became unusable. So i figured i would go in and set a new one. Turns out it won't allow me to set a new password. It says: "Does not meet the requirements". I have set the password to be 20 charachters, i have got lower-case, upper-case, number and ! in there. I have tried different browsers as well. ...

  • 2635 Posts
  • 99 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks