Execute a program in my endpoint from live terminal Cortex XDR

Hi everyone, 

has anyone tried to execute a program in an endpoint from live terminal? I mean, when you are in the endpoint you can use a command like c:\notepad.exe in cmd and it opens notepad, I want to do the same but from the live terminal, I t

Cortex XDR folder exclusion - for Mac-Clients

How do i put a Folder on a Mac-Client in the Malware-Policiy-Profile into the Allow-List?
For Windows-Clients, thats no big Problem, the Path always gets delivered with the Incident, but for Mac, the Path does not seem the Case, or, at least, i cannot

Active Scanning on Endpoints

Hello,

We intend to perform scheduled scanning on all endpoints. So we wondered if active scanning was required on all endpoints repeatedly, or if cortex developed its own scan whenever a new file was created or added to the system.

Cortex Filter on MacOS prevents internet connectivity

Hey everyone,

We're having some issues with the most recent Agent Version on MacOS (7.9.0.2505).

When some of our clients were upgraded to this version they suddenly lost internet connectivity. The only thing that worked for them was to remove Co

Mitre ATT&CK coverage

Hello dear Livecommunity, 

as you know, Cortex XDR is a very powerful peace of software and I am happy to use and administrate it. 

But I never doubt about coverage of the mitre attack patterns and I am a little bit upset, we need to get through th

Broker VM & SIEM

Hello folks.

How we can forward Cortex Agent logs from Broker VM to SIEM systems?

[agent] ====> [Broker VM] ====> [SIEM]

Cortex XDR 

CORTEX XDR

I want to add palo alto firewalls to cortex xdr do I need to add only panorama or do I need to add 

Indvidual firewalls to get alert 

do i need to use firewall mgmt. ip or panorama mgmt. ip 

we have more than 300 firewalls split into HWAN and LAN MFG

Query regarding malware scan

During initiating the malware scan on connected endpoints suppose the system moves to disconnected state for few days and the scan status starts showing in progress now. Could you please let us know the duration of the malware scan is applicable for

Malware scan is not getting intiated

Hello,

While initiating malware scan through policy, for certain endpoints the scan is not getting initiated, and the scan status is "None". How can this be resolved?

How to check endpoint has no agent and intregate edl with NGFW

Hi Expert ,

How to check endpoint has no agent and integrate edl with NGFW when found endpoint 

Now , I have try to create  python script  to get all endpoint  but not have idea to check endpoint has no agent 

Thank you

Whitelisting of Files

Hello, 

We are running periodic scan on all endpoints . During this scan few files has been detected .We have  got confirmation that some of the files are legitimate and it's being used in infra. 

Can you please suggest in providing what is the best