Need to suppress alerts that are getting generated as a result of adding a file execution in the restrictions

[Rohita_Tewari]

Hi Team,

We have added the file execution for Quickassist in restriction in XDR console but we dont want to get flooded with the alerts that are getting generated due to it. Is there any way that I could get restrict the file execution but also suppress the resulting alerts simultaneously?

Regards

Rohita 

[BPry]

@Rohita_Tewari,

What you're going to want to look into is called an alert exclusion rule. 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Alert-Exclu...

[Rohita_Tewari]

Please let me try this option out and revert. Thanks!

Regards

Rohita