Events That Cortex XDR is Logging

[mkuhelj]

Hi everyone,

Does anyone have a list or any reference to a document where I can see which logs Cortex XDR is gathering from a Windows endpoint? For example, to clearly know, that XDR is gathering all file event types, process creations, gathering event IDs (based on which one are enabled), etc.

Thank you.

[aspatil · Accepted solution]

Hello,

You can find the required information in below article:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Endpoin...

Let me know if it helps!