10-28-2022 10:40 AM
Hello,
A client received a pop-up blocked alert because a suspicious executable was found on their machine. When the client went to view more details, the executable that was blocked was never displayed in the details information. Why is that? By the way this was a post detection blocked Cortex XDR alert. I have attached a screenshot of the alert.
10-31-2022 07:36 AM
Hi Sara.Larmer,
Our recommendation for alerts are to be investigated through the XDR management console. The alert could be a smaller part of a larger incident and reviewing it from the console will provide a more holistic view of the event in question.
Please let me know if you need any additional help.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
