does cortex xdr agent can perform real time scan on end point ?

[venkat_n7]

Hi,

Can you provide me information on how cortex xdr agent perform real time threat detection ?

1. does it is detect when file is dowloaded and prevent from downloading ?

2. does it prevent file execution ?

I like to know the process, I am looking to adopt the cortex xdr for endpoint protection.

Thanks,

[fmoixsante · Accepted solution]

Hi @venkat_n7,

Please refer to this article to understand how Cortex XDR does threat protection.

1. Cortex XDR will not be able to prevent someone from downloading malware. That's a NGFW feature.
2. Cortex XDR has several protections modules that will activate during execution. Please refer to the above provided link.