Action #352 failed. Action description: Retrieve endpoint data from

cannot install cortex on server core 2022

Hi all 

i try to install cortex agent 7.8 on server core 2022 but it fails with little explanation 

did someone success on it ? 

=== Verbose logging started: 21-10-22  10:56:37  Build type: SHIP UNICODE 5.00.10011.00  Calling process: C:\Wind

Blocking executions of IOC without showing any alerts

Hello , 

Please help us with the process of blocking of IOC process coming from various campaigns in cortex XDR . 

Regards,

Shashank

Named pipe hunting -Cortex XDR Pro

Hello dear community! 

Is there a way to hunt for named pipe communication? 

BR

Rob

https://svch0st.medium.com/guide-to-named-pipes-and-hunting-for-cobalt-strike-pipes-dc46b2c5f575

How to query for Vulnerability Assessment Data

I would like to query XDR externally for the data stored in the Host Insights > Vulnerability Assessment page. 

I looked through all of the available APIs, but none of them seem to have data related to CVEs. I would not be opposed to writing a custom

Cortex XDR: False Positive detection of VulnDetect scripts

Hi,

A number of our customers has complained about our signed PowerShell scripts being flagged and, in some cases, blocked by Cortex XDR.

The scripts in question can be found here:

https://stream.vulndetect.com/e/task.ps1

https://stream.vulndetec

Host Firewall

Hello Team,

We intend to enable the Host Firewall feature in the Cortex XDR. Please give us a brief overview of how this feature works.

Not able to set Proxy for Windows 2012 servers

Hello ,

We are unable to see  few servers in our endpoint list. But the user confirmed it has cortex installed in it and is enabled also particularly For Windows 2012 servers we're not able to set the proxy and for some hosts last seen connected dat

Agents Intermittently Disappearing in Cortex XDR Then Shows Up

Hi,

Some Agents in Cortex DXR disappears then shows up after few days - no pattern at all

If my understanding is correct, if the Agents are disconnected or there's a connection lost, the Endpoint Status column will dictate it.

But the Agents in q

Cortex XDR PoC: Monitoring Malicious Chrome Extensions

PoC Lab: Monitoring Malicious Chrome Extensions

By:  @mfakhouri 

Executive Summary

With the convenience Chrome extensions provide, such as ad blocking, enhanced web viewing, and improving user experiences, it is no surprise that malicious act