Cortex XDR solution for WSL running on Windows

[antony.lamsdell]

I am aware that Cortex XDR Agent can monitor traffic leaving WSL in the same way that it does with VMWARE or other virtualisation platforms with the WSL processes being a source of activity onto the windows system which is monitored, but the internal activity of the WSL cannot be monitored.

Is there an active solution for deploying Cortex XDR Agent within WSL in some manner to allow internal monitoring for a comprehensive overview of those systems?

[nsinghvirk · Accepted solution]

Hello @antony.lamsdell 

Thanks for reaching out on LiveCommunity.

Unfortunately XDR do not provide detailed visibility inside WSL workloads.

We support WSL with limited set of capabilities including ransomeware protection, Limited analytics detectors on process based actions and basic process activities. Heuristic modules like BTP are not available.

Please click Accept as Solution to acknowledge that the answer to your question has been provided.