Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
1172 PostsCortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
617 PostsCortex Xpanse builds a system of record that is the authoritative source for an organization’s global Internet assets; it knows your attack surface so you can own it before someone else.
3 PostsCortex XSIAM, the autonomous security platform powering the Modern SOC, operates across cloud and enterprise security operations, providing true end-to-end management of threats wherever they originate.
1 Posts
Is it possible to access the vulnerability assessments via XQL and/or API
I've been tasked with looking at the possiblity of taking the CVE lists from vulnerability assessment and matching them to MS KB. I don't want to be manually running reports
...
Hello,
I have turned off alerts on NGFW for Private URL, but I still get threat ID #9999.
Can somebody a little bit more explain what this threat ID means? I am trying to clean it up, but still get these alerts.
And it is not any kind of malicious tr
...
Hello,
Does anyone know how to generate a report of the number of incidents per month on cortex ?
I can only generate for the current month and not for the past months.
Thanks in advance.
Does anyone know a way to search for multiple hashes on Cortex XDR?
file_search = existing_files does not allow any operators other than "=" for the sha values and you can't string multiple in a query.
I feel like I'm missing something and there sho
...
Hello everyone!
Recently, I have been learning about the Identity Analytics feature in Cortex XDR.
After enabling Identity Analytics, I found that not every tenant presents the same interface.
I found that the following UI features are not identica
...
Hello Community,
I am trying to understand Palo Alto XDR logs fetched using API(XQL Query).
I am using dataset as xdr_data, want to know what all event_types can come under this dataset.
For ex: EVENT_LOG.
What are the possible values we can ge
...
Hello,
We'd like to know if a zip file is encrypted inside a playbook or a automation. The way in which XSOAR works with these files does not allow the use of python libraries. Is there a way through the File context value to know if the file is encr
...
Hi All,
Need some help!
We have a Linux instance where the opt/ folder size is 2 GB and the recommended disk quota by Cortex is 5 GB. We can not resize it.
Do anyone know if there is a way to change the installation directory of Cortex from /opt to
...
Hi everyone,
unfortunately we still have a bunch of W7/S2008R computers (without extended support) in our network. The majority of the pcs have Cortex XDR 7.9 installed. In terms of support we are now trying to uninstall 7.9 and install 7.5 CE instea
...
Error Detail:
ContentPackInstaller - Error occurred while setting up machine. string indices must be integers
Any suggestion, what could be the reason. Tried to pass integer values also but no luck.
Hi all,
I have a multi-tenant deployment. I want to run a script or playbook from one tenant to another tenant. How can I do this?
#XSOAR
I read the relevant documents, but I don't quite understand them. I hope someone can confirm them for me.
reference articale url :https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/cortex-x
...
Hi,
We are providing partner integration for our product and this is the requirement.
My product # generates/creates 'Cases' which are pulled inCortex XSOAR as incidents using fetchIncidents call. It might be possible that sometimes a 'Case' in ou
...
I want to design a widget. This widget will appear on the dashboard. But I want this widget to work only once a day. How can I do this?
Cortex XSOAR
| User | Count |
|---|---|
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 |
| Subject | Likes |
|---|---|
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like |
| User | Likes Count |
|---|---|
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 2 |
