Cortex scan

[CharlesBurch1]

how do i run a full scan on an endpoint

[jmoscoso1]

Go to the Action Center > New Action > Malware Scan.

Then select the endpoints you want to scan.

Scan an Endpoint for Malware • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks docu...

[CharlesBurch1]

When I click Select Incident Response → Response → Action Center → +New Action.

All I see

ACTIONS

action files retrieval

Files Retrieval

Retrieve files from an endpoint

action retrieve support file

Retrieve Support File

Upload extended agent log file

action upgrade

Agent Upgrade

Upgrade XDR agent version

action uninstall

Agent Uninstall

Uninstall XDR agent

Is this because I do not have permission to run a scan?

[jmoscoso1]

Maybe you have remediation or response actions disabled for your user.

You can also try going to Endpoints > All Endpoints > Search for the endpoint you want to scan > right click > Security Operations > Initiate Malware Scan

[CharlesBurch1]

Thank again 

 For Security Operations, only see Retiveve Endpoint Files, & Initiate Live Terminal