05-16-2023 10:32 AM
Was curious, is there a related registry key for Traps last check-in date? I'm curious if there is an easy way to pull in that information with powershell.
Quick example scenario would be that we would use one script to pull in the last check in time with multiple computers with Cortex XDR.
05-17-2023 01:58 AM
There are a few ways to achieve this in decreasing order of preference to collect the data:
05-19-2023 11:54 AM
Thank you for the quick reply. That helps a lot. Would it be possible without access to the management console?
05-20-2023 12:15 PM
The second option suggested by @bbarmanroy - "run cytool last_checkin" is the option "without access to the management console".
Cytool is CLI tool that is installed with CortexXDR agent on each endpoint and can be used to troubleshoot and manage the XDR agent. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.0/Cortex-XDR-Agent-Administrator-Guide/Cytoo...
With this option you need to execute the command on each individual endpoint and check the output.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!