Installing Prisma applicatioin for QRadar fails.

I am not sure this is the correct place to post this.

I am trying to install the Prisma Cloud QRadar ( RedLock-1.0.1 ) application in my QRadar deployment and it fails pretty quickly with "An error occured.  See console logs for details."  Curious if

Pulling Metrics from Prisma CLoud via API Integration with PowerBI

We are trying to figure out how to connect to our Prisma Cloud Tenant via API and pull metrics into PowerBI dashboards. Has anyone been able to pull metrics automatically with PowerBI or any tool for that matter?

Does the Bot Protection use a Palo Alto cloud for bot analysis or only the local WAAS container is used and the role of the Javascript fingerprint?

Hello to All,

My question is simple Does Prisma Cloud WAAS bot protection use a Palo Alto cloud for bot analysis or only the local WAAS container is used? Probably the installed WAAS from time to time downloads bot signatures but what I am asking i

Automatically check Prisma Cloud account status?

Is there a mechanism to automate checks/provide notification of the status of a cloud account in Prisma Cloud?

(i.e. If we are relying on Prisma Cloud to provide detection capabilities how can we monitor that the service itself is functioning and has

Automate Newly created cloud account in Prisma cloud

Hi,

Can anyone direct me to a document or script that can be used to automate account onboarding whenever a new AWS account is created in the organisation. I have this on github but the seems to be the entire process of onboarding Prisma cloud;

https:/

Prisma Cloud Support for - AWS IDP OIDC

We need to be able to inventory, search, and create policies related to OIDC type IDPs within AWS. AWS supports via CLI with the use of: list-open-id-connect-providers

https://docs.aws.amazon.com/cli/latest/reference/iam/list-open-id-connect-providers

How to write RQL to check the log activity/operations with respect any host name of the resource??

Is there a way to write RQL to check the traffic towards that resource/to know the operations/activity details with respect to particular resource host name?In the circumstances where we are not aware of the cloud type??and if can't atleast with clou

RQL AWS Failed Login attempts > 5

Hello team.

I can look for an event to see failed login attempts with;

event where operation = 'ConsoleLogin' and json.rule = $.responseElements.ConsoleLogin != 'Success'

Is there a way to count these (like we see in config with 'as X; count(X) greater

What is the reason for the RQL filter of the RDS Multi-AZ disabled Policy?

Policy Name : AWS RDS instance with Multi-Availability Zone disabled.

Policy Mode : Prisma Cloud Default

RQL : config where cloud.type = 'aws' AND api.name = 'aws-rds-describe-db-instances' AND json.rule = '(engine does not contain aurora and engine do

Prisma Cloud able to check passwords on servers?

Is it possible with Prisma Cloud to check that passwords (e.g. Linux root, Windows local administrator) are unique on each server hosted in AWS, Azure, etc.?

How to write RQL to list out the cloud account & account group details with the below query

Hi Friends,

I wanted to look out the traffic where FTP/SSH port enabled from an internet/suspicious IP's to internal network.With the below query i am able to see the connection details.

network where dest.port IN ( 21,22 ) AND source.publicnetwork I

After entering the credentials of visibility(AppDependencyMap)

/usr/local/bin/apoctl: line 1: syntax error near unexpected token `<'
/usr/local/bin/apoctl: line 1: `<?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message></Error>'