Resolved! A question from Cortex XDR Active Scanning Webinar: Failed attempt alert

Is there an alert for a failed attempt/attempts to stop the Cortex Service on an Endpoint?

*Note: This question was asked as part of the Cortex XDR Customer Success Webinar: Active Scanning
We encourage you to review the webinar article for addition

Resolved! A question from Customer Success Office Hours: Cortex XDR Exclusions and Exceptions

What are the differences between Exclusions and Exceptions and related best practices? 

Cortex XDR 

Resolved! A question from a Customer Success Office Hours session: Alert Exclusions

How do I filter out excluded=Yes Alerts. I'm getting emails about alerts that are already excluded?

Resolved! A question from the Endpoint Administration Part 2 webinar: Alert ID

We often notice alert_id out of the numerical order, chronologically, sometimes way off. It appears like XDR is detecting something later and assigning an older timestamp but a new alert_id to detection. Can someone provide some detail/explanation on

Resolved! A question from the Endpoint Administration Part 2 webinar: Supervisor Password

Uninstall password is configured when the account is set up, is the supervisor password just our cortex password, and only works if the account has the proper permissions?

Resolved! A question from the Endpoint Administration Part 2 webinar: XDR Agent

we have some scenarios where XDR agent services are running and show enabled in endpoints but in XDR console it shows as disconnected. What will be the major workaround for this kind of issue?

Note: This question was asked during a customer success

Resolved! A question from the Endpoint Administration Part 2 webinar: XQL

Is there documentation of the queries for the built-in XQL widgets? I would like to use them as examples for custom XQL widgets for custom dashboards.

Note: This question was asked during a customer success webinar: Endpoint Administration Part 2

Resolved! A question from the Endpoint Administration Part 2 webinar: Linux machines & Kernel Updates

There are some instances of Linux machines that are protected previously and then became unprotected or partially protected. As per checking on them, it was because the kernel version was upgraded to the latest version and is still not listed on the