Resolved! Exporting events from Cortex XDR

Hello,

I have been doing some searching on if I can get XDR endpoint logs like processes and etc into a third party SIEM.

Based on the XDR API there is no way to export events (You can technically run XQL queries using the API but this would get logged

Resolved! Rogue Device Discovery with Cortex XDR

Hi,

I would like to implement Rogue Device Discovery with Cortex XDR but it is not clear for me what I need to do this. We have Cortex XDR Pro per Endpoint license – do I need anything else (like datalike) to set the solution? Can I expect any issues

Resolved! No Security Data Populating in AIOps

• I first created a new Tenet for a Customer Support Account, selected the Americas Region, and left the CDL instance blank.
• I then associated the device in the Tenet view of the Hub by going to Common Services > Device Associations.
• I waited 24 hours an

Resolved! XDR Collectors and Data Collection Integrations missing in Configuration

Hi, I'm trying to forward external syslogs Cortex XDR and I'm unable to find XDR Collectors section and Data collection Integrations section in the Configurations. Below is what I see in the menu. I have account admin privileges. 

We have Advanced e