How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

[J.Muencharern]

Hi Members,

     Please advise. How to configure for assessed the Suspicious Process on Cortex XDR that need to monitor and logged because customer don’t need to exclusion?

Thanks & regards,

Jirapan M.

[nsinghvirk]

Hello @J.Muencharern ,

Thanks for reaching out on LiveCommunity.

Can you please clarify your use case? Are you looking for a way to not generate alert but in background you want XDR to provide protection and log activity?

[J.Muencharern]

Hello Nsinghvirk,

         I would like to get alert and log from Cortex XDR when it was detected on the suspicious file and don't want blocked the suspicious files.The action is notification.

Thanks & regards,