Test alerts in Cortex xdr

[DanielMasse]

Is there a built-in way to generate a test alert either from an agent installed on a client machine or through the XDR portal itself?

I currently have an agent ver 7.6.2 installed on a windows box and I'd like to create a test alert that will be visible in the portal.

Thanks.

[KanwarSingh01]

I am not aware of any built-in utility in XDR agent or cloud console but you can do the following:

There are multiple types of alerts which can be created by yourself:

• Prevention
• Detection
• Detected (Reported)

The easiest way could be as simple as deleting shadow copies of your system where the agent is installed.

• Open cmd.exe (Run as Admin)
• Run Command: vssadmin delete shadows /All

Please note: The above command will delete your Shadow Copies on your endpoint and generate a BIOC detection alert.

[bbarmanroy · Accepted solution]

Hi @DanielMasse please use the Windows PE malware file found here: https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/submit-files-for-wildfire-analysis/ver....

Once you execute the file, you'll get a notification on the agent as well as in XDR console.