01-15-2025 08:52 AM
Hi @Dzung_TranC ,
Thank you for writing to live community!
While it will be very difficult to answer the "WHY" aspect of your query, I would definitely like to highlight this to you that Palo Alto Networks Cortex XDR roadmap of innovation is very much driven on customer feedbacks and upvotes. While Windows and macOS footprints in the world are way larger or equivalent in terms of usage, their footprint of common end user usage is more, which essentially expands the attack surface area in this direction. This does not imply that linux/unix systems are agnostic of attacks and there is not a need of a linux forensics collection, but we can assure you that our product engineering and R&D is dedicated for enhancement in this direction as well.
Please consider reaching out to your accounts team or customer success teams to raise/upvote the feature to introduce forensics for linux and that should be the direction to have the feature.
Hope this helps
