RQL query to check for any Change in role for Instance

I am trying to create an RQL query, which will check if anyone attaches or modify roles to an AWS instance.

I am using the below Query :

I did some testing on one of th

Missing "Manage" submenu under compute in Prisma Cloud portal

I don't see any options or submenu available under compute of Prisma Cloud portal. Referring this link , trying to navigate compute > manage to find the console url or install host defender. However I don't see the any submenu options under compute.

access to console

Something went wrong

Please try again and if you continue to see this error, please contact the Prisma Cloud team with the following error code: 9afadde495e84126b078b948fc517a2d

Port Scan Activity (External) too much noise but can there be a way to really Alert only on risky ports (config is vulnerable)

I got an AHA/Idea (aka RFE) for Prisma Cloud's Network Anomaly of Port Scan Activity (external) as Prisma Cloud just alerts as-is if someone is knocking at our door regardless if the port is secure otherwise.

We want some intelligence built-in to c

Need to understand about SFTP server for file exchange monitoring

Hi Team,

Is this possible to use the  Prisma Cloud tenants to monitor a resource in our GCP environment. This resource is an SFTP server for file exchange.
Kindly confirm on the details please.

Instance type: Prisma Enterprise edition

Prisma Clo

Access to dashboard "Inventory / Asset Inventory" Prisma Cloud

A user was assigned the role "Devsecops / account group read-only" to access Prisma in read mode. How can we allow you to see the graphical and numerical results of the "Inventory / Asset Inventory" panel?

Thanks,

Asset Inventory not reflecting after AWS account addtion

All,

I am new to the prisma cloud world. I am working on trying to understand the CSPM and CWP aspects of prisma for a POC I need to do for a customer. 

However after successful account addtion the assets are not getting reflected.

Any help or potent

Prisma detecting CVEs when pulled but not during scan job in CI

So, I'm basically pulling the base images of the certain OS,  and hardening them to reload onto another registry. When I pull the image and harden and push, under CI Scans of (Gitlab) of my pipeline. I don't get any CVEs. But when I pull the same ima

Prisma Cloud enterprise edititon

Hello,

            This is in regards to Prisma Cloud Enterprise Edition integration with Microsoft Azure

I would appreciate if any one could let me know what all services in Azure, Prisma Cloud Enterprise Edition supports for detection, Reporting, c

Detect Agent Installation via Prisma Cloud

We are looking to be able to check the following scenarios via Prisma Cloud.

1) Is EDR / Anti-Virus installed on compute workloads

2) Health status of the services

3) Enable auto-remediation (installation) if not present.

Has anyone worked through this

Terraform Provider for Prisma Cloud Compute

Just wanted to share this tutorial I have made on how to use Terraform with Prisma Cloud Compute! Let me know if you have any questions or comments.

https://www.youtube.com/embed/9R3XWnl4EPs

Defender for dockers installed via snap

Hello everyone.

I'm using Ubuntu 20.04 LTS and I installed docker via snap to run containers. When I install a container defender on this host, I get the following error:

invalid output path: directory "/var/lib/twistlock" does not exist.
Failed to cop

Prisma Cloud Compute API filtering

Hello,

I'm using the Compute/Twistlock API to query image statuses, but I'd like to filter the fields returned to reduce the size of the payload, which contains many things I don't care about for now. I looked at https://cdn.twistlock.com/docs/api/tw

Credits for Defender

Hi,

I want to ask how the credits work for Defender. If I have docker containers and host that scale up and down, how would the credits be calculated? There is a limit on the credits, so will the scaling up and running the defender stop at the limit