Email Alert for Custom Image Vulnerability Rule

Introducing PA Prisma to my Network

Hi everyone, I hope you are all well. This is my first time post here and very excited to have entered the Palo Alto world.

I am working with a third party to implement Prisma into my network environment. The idea behind this is to scrap the Bluecoat

Prisma Cloud Event Search API - Include data.items[].rawEvent in response

In my organization we have Prisma Cloud integrated into AWS Organization environment.  Which is great for monitoring and pulling data from the entire AWS Org.  I want to pull the count of all ec2 instances which are created using the RunInstances cal

How to download the policy list containing the desired information?

In the past, when downloading in csv format from the Policy menu of Prisma Cloud, the following information was included and the Policy List could be checked.

(Policy Name, Cloud Type, Severity, Policy Type, Mode, Compliance Standard, Labels, Saved S

403 Function is not supported when running on cloud on JFrog Artifactory

Symptom
There may be an issue that appears when trying to scan a publicly accessible JFrog Artifactory when using the JFrog Artifactory version registry settings. 

Error messages
In Defend > Vulnerabilities > Registry, you will see an error message that

ECR scan failed with the message "Failed to query image"

Hi forks,

I'm very new of PrismaCloud and CWPP category. I've tried scan image on ECR following below TECHDOCS but it failed with the error "Registry Scan: Failed to query image details hello-ykym latest failed unmarshaling registry manifest response

Alert for Instance/VM creation

Is there a feature in Prisma Cloud that can alert if an Instance/VM is created?

OVHCloud support

Hi,

Does Prisma or any other PA product support OVH?

Thanks,

Dean

How do I validate resources that have 443 publicly exposed have a WAF ?

If you have an AWS EC2 instance with 443 exposed to the internet, you would get an alert but what would be a good way to validate that a particular instance has a WAF protecting it?  One thing I was thinking of would be to do a joins looking at the E

Unusual server port activity Internal Alerts Potential False Positives

I have the thresholds for Unusual Server Port Internal activity set to the most conservative settings to minimize false positives but it seems like the highest port consistently gets flagged as "unusual".  In the example below there are 15 ports labe

PRISMA CLOUD APP For QRADAR Released on 7th Oct 2020

PrismaCloud API: Resource Scan Info

Hello

We are getting resources information by the api call /resource/scan_info (POST method), but we want to get the resource.type and the cloud.service associated to the resource in the response.

In the API reference there is a field named fields wich