Resolved! Cortex xdr : create custom widget
Dear all,
I want to create a widget which contains the incidents by severity but I need to add a filter by tags.
Can I have an example of the XQL query.
Best regards,
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
Dear all,
I want to create a widget which contains the incidents by severity but I need to add a filter by tags.
Can I have an example of the XQL query.
Best regards,
Hello,
Is there a way to create a connector between cortex console and AWS portal that can fetch EC2 information as soon as the agent comes online and then populate the data received by this connector into the XDR.
Thanks !
Has anyone managed to successfully deployed the Windows Cortex agent via Intune?
I have an app configured and deployed, but it's not working as expected. Likely because of the App protection policy in Cortex. I have version checking in the App turn
...
Hi ,
It shows half of the Linux systems partially protected even though all the the kernel versions, content update and agent version are compatible .Also no policy changes were made. What could be the problem ?
Hello dear Community,
Does the Cortex XDR Agent work in Windows Safe Mode?
https://attack.mitre.org/techniques/T1562/009/
BR
Rob
Subject | Likes |
---|---|
3 Likes | |
3 Likes | |
2 Likes | |
2 Likes | |
1 Like |