Prisma Cloud Event Search API - Include data.items[].rawEvent in response

In my organization we have Prisma Cloud integrated into AWS Organization environment.  Which is great for monitoring and pulling data from the entire AWS Org.  I want to pull the count of all ec2 instances which are created using the RunInstances cal

How to download the policy list containing the desired information?

In the past, when downloading in csv format from the Policy menu of Prisma Cloud, the following information was included and the Policy List could be checked.

(Policy Name, Cloud Type, Severity, Policy Type, Mode, Compliance Standard, Labels, Saved S

403 Function is not supported when running on cloud on JFrog Artifactory

Symptom
There may be an issue that appears when trying to scan a publicly accessible JFrog Artifactory when using the JFrog Artifactory version registry settings. 

Error messages
In Defend > Vulnerabilities > Registry, you will see an error message that

ECR scan failed with the message "Failed to query image"

Hi forks,

I'm very new of PrismaCloud and CWPP category. I've tried scan image on ECR following below TECHDOCS but it failed with the error "Registry Scan: Failed to query image details hello-ykym latest failed unmarshaling registry manifest response

Alert for Instance/VM creation

Is there a feature in Prisma Cloud that can alert if an Instance/VM is created?

OVHCloud support

Hi,

Does Prisma or any other PA product support OVH?

Thanks,

Dean

How do I validate resources that have 443 publicly exposed have a WAF ?

If you have an AWS EC2 instance with 443 exposed to the internet, you would get an alert but what would be a good way to validate that a particular instance has a WAF protecting it?  One thing I was thinking of would be to do a joins looking at the E

Unusual server port activity Internal Alerts Potential False Positives

I have the thresholds for Unusual Server Port Internal activity set to the most conservative settings to minimize false positives but it seems like the highest port consistently gets flagged as "unusual".  In the example below there are 15 ports labe

PRISMA CLOUD APP For QRADAR Released on 7th Oct 2020

PrismaCloud API: Resource Scan Info

Hello

We are getting resources information by the api call /resource/scan_info (POST method), but we want to get the resource.type and the cloud.service associated to the resource in the response.

In the API reference there is a field named fields wich

Is it possible to export a list of all the Kubernetes CIS benchmarks v1.4 that Prisma Cloud checks?

Hello, 

I have 5 questions, regarding the use of K8s CIS benchmarks v1.4 in Prisma Cloud, any help appreciated!!

1) Does anyone know if there is a way to export a list of all the Kubernetes CIS benchmarks v1.4 that Prisma Cloud checks? (exporting in a

Configure Github enterprise API as oauth2.0

Hello all,

I've been trying to configure github enterprise as provider on the OAUTH2.0 authentication page. For what I can experience the API URL is hardcoded to https://api.github.com/ as I can see in the logs. My question is if it's possible to con

Prisma Internet access from remote site

Hi everyone, hope you're all safe and well. My company is in the process of rolling out Palo Alto, Prisma and Global Protect worldwide. I've come across an issue that is causing me a bit of a headache. I hope someone can help.

Current setup

• Site A - 1

CSPM API changed?

It seems to be (from the content in the response) that the API of Prisma Cloud CSPM has changed. When I call 'https://api.prismacloud.io/v2/alert?timeType=relative&timeAmount=1&timeUnit=day&detailed=true' the response (according to the documentation