Endpoint scans in endpoints with network shared folders

Cortex XDR 

By compliance, we need to set periodic endpoint scans. We have several endpoints which have network shared folders in common, and we wouldn't like to scan the same network shared folder several times at the same time. We would like to kno

Cortex XDR Broker VM Applet activation failure

I tried to activate syslog collector applet in Broker VM but the connection status goes from connecting to connection failed/error. Kindly help if you have troubleshooted this issue.

Cortex XDR

Cortex XDR Incident Best Practices

Hello,

I know this migth not easy to answer, but I'm going to take my chance anyway.
Are there any incident best practices for (each) Cortex XDR detector documented ? For example what a certain detector means, what the best thing is to do in this case,

Malware Profile - Ransomware Protection

Hello community, does anyone have more information pertaining to Ransomware Protection (Protection Mode) between "Aggressive" vs "Normal"?

From what I understand is that aggressive mode will have decoy files being created on the local machine. 

JAVA Query for Cortex XDR

is it possible to create a query to detect a specific java injection process?

Regards,

Shashank

CPU Utilization is high

Why does cortex XDR increase cpu usage ?

And after agent upgradation does cpu usuage increase?

what all other factors are there for high cpu utilization because of cortex xdr?

Authorization Disk encryption visibility

Hello dear community, 

I'd like to make the Disk encryption visibility module visible to our trainee. How is it possible, I couln't find any possibility. 

BR

Rob

Cortex XDR collects usage metrics

Hello,

Can cortex xdr collect usage metrics?

XQL Search- to get the source of the file

I want to know the XQL query or filters which helps in the analysis of alerts & to know the source of file where it is coming into our system.

For example- whether user downloaded the file from browser or someone sent through outlook, from portable d

Cortex XDR P2P

Hi,

someone please elaborate XDR P2P how happens and how xdr elect one peer agent in the LAN.

URL Exception

Hi Team,

Does Cortex XDR support URL filtering. We have a request to whitelist a URL on XDR in order for user to be able to access it. 

Wondering if this is even possible by XDR or should be taken care at proxy level.

Thanks

Compatiblity Check

Hello,

Is XDR compatible on Qualys virtual scanner appliance. It is a azure based Linux server.

User Role Change - Account Admin

Hi Team,

Who can change user role access for account admin ? Instance administrator does not have access to change it. #UserRole #CortexXDR

Regards,

Gokul K