Resolved! XDR agent not triggering alerts in the managements console while blocking

Hi, I have a rather peculiar issue(?) with one of my agents.

Said agent is working as intended, however it blocked a certain  file form running under "Local Malware Analysis". which is fine, but I did not receive any alert nor incident in the manageme

Resolved! Where to get more information on "Behavioral threat detected (rule: create_renamed_script_engine_by_hash)"

Hello Cortex users, wondering if anyone has seen this before?  We are getting a single host flagged with a large amount of "Behavioral threat detected (rule: create_renamed_script_engine_by_hash)" but when we investigate in Cortex XDR there is almost

Resolved! Select more than 100 endpoints in Prevention Policy Rule

Hi,

I created new Prevention Policy Rule and can only select 100 endpoints. When I try to select more, I get the Note:

Resolved! Cortex XDR installation on an Windows 2022 Core

Dear PA,

Trying to install Cortex XDR v.7.7.0.X on a Windows 2022 Core and receive "Setup Wizard Ended Prematurely".

Any feed back from your side about this?

Best,

C.

Resolved! Correct resolve types for XDR Incidents

Hi All,

I tried to find this on PA Knowledge base but unsuccessful. Our team tries not to make exceptions/whitelisting unless absolutely needed. Therefore, I believe teaching Cortex XDR correctly on what is safe and what is not is crucial. 

For examp

Resolved! Can we check via cortex XDR which are systems have any specific software installed

Can we check via cortex XDR which are systems have any specific software installed

Resolved! macOS Network Filter limited to no more than one active network service on M1 Mac

Hi,

I'm an enduser of Cortex XDR. Recently my workstation was migrated from an Intel MacBook Pro to a M1. During the migration process, both workstations were on macOS Monterey 12.3.1.

I've discovered on the M1 that with the Cortex XDR network filter

Resolved! Query Network

Hello XDR Community!

when the network (see screenshot) will be depprecated, will it be possible to get all the informations under network connections? 

I don't get the same results and not dst_host which would be very usefull. 

Here is my Query:

Networ