How to check cortex agent content update date on endpoint

[Poornakumar]

Hi Team,

Anyone has an idea how to check the content update date in endpoint please note not in the cortex management console i want to check the last content update date in endpoint.

[nohash4u]

Hello @Poornakumar, 

This information is available within the tech support file that can be generated from the Cortex XDR agent running on the endpoint. 

You will need a password from the Cortex XDR gateway / management console to access the content of the TSF.

There is more info on accessing the contents of the TSF here: 

• Support File Password 

I was able to locate the relevant information from a trapsd.log file within the TSF folder (logs --> trapsd.log or logs --> trapsd.number_here.log). 

Cheers.