User activity

[JaisonVargas]

Hello,

I used Cortex XDR for Endpoint Security, but I would like to know if XDR can identify and report user activity and time spent on it.

Thanks. 

[mavraham]

Hi @JaisonVargas,

Thank you for writing to Live Community. Would you be able to elaborate on which activates you are looking to track? You can create BIOC rules to receive alerts about certain type of suspicious behaviors related to files (read, write, create etc), injections ,process and others.

You cannot however track time spent on certain apps if I understand you correctly.