Can we check via cortex XDR which are systems have any specific software installed
Hi all,
Is there any way to add comments to existing device exceptions? I haven’t found the option to do so.
Hello,
I am looking to enable the "Java Deserialization Protection" in my exploit profile.
I see the default is to leave it disabled.
anyone else have this enabled?
any advise or experience working with this?
I'm getting multiple alerts about the file "TwitchClient.exe" which is under below path
C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.10043.0_x64__0a9344xs7nr4m\radeonsoftware\twitch\TwitchClient.exe
Is this file is a
...
Hi All
I'm new to Cortex XDR Hub and i'm trying to manage somes clients in the right way.
I got this situation:
There are some clients who had used IoBit - DriverBooster for the drivers installation on the machine.
A lot of services about this applicat
Hi,
I'm an enduser of Cortex XDR. Recently my workstation was migrated from an Intel MacBook Pro to a M1. During the migration process, both workstations were on macOS Monterey 12.3.1.
I've discovered on the M1 that with the Cortex XDR network filter
...
Hello XDR Community!
when the network (see screenshot) will be depprecated, will it be possible to get all the informations under network connections?
I don't get the same results and not dst_host which would be very usefull.
Here is my Query:
Networ
...
Is it possible to install Cortex on a Server 2019 core edition? There is no graphic interface but we'd like to have Cortex running on all our servers.
Thanks!
Hi,
Just wondering if there is any reason why we need to keep the expired certificate on system for Cortex XDR.
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/get-started-with-cortex-xdr-prevent/set-up-endpoint-protectio
...
Hello All
I would like to use host insights to provide a list of each machine with a specific software installed.
For example computer that have software containing 'docker'
I can go to host insights, Applications, filter to include 'docker' and see
...
In many cases the firewall based DLP or Prisma Access cloud based DLP is good enough but in some cases like if the web site can't be decrypted or a local corporate site that does not go through the Prisma Access an endpoint DLP is great.
So I hav
...
Hello!
are we allowed as cortex xdr customers to penetrate the security suite through other researchers/analysts like TPSC https://thepcsecuritychannel.com/ ? They will also put a video on youtube.
Thanks
BR
Rob
Hello!
we have bought a DNS SEC product with a TI Feed (with bad IPs - about 900k).
How can we integrate this into Cortex XDR?
It is a textfile, which can be downloaded through a simple link.
IP1
IP2
...
We need a way to put this IP-Check somewhere on t
...
I have a security event, I clicked in and found that the CGO signature is unsigned, but when I create an alert exception, it recognizes the signer, why is that? The signature is not recognized, but the signer can be recognized
Hello,
Seems XDR - Device control only block USB-related devices on the Endpoint, is it blocking any new Bluetooth devices if the GUID is unknown?
any ideas?
Cortex XDR
