This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About SeanDeHarris
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SeanDeHarris
09-28-2023
41Posts
6Likes
1Solution
Sep 28, 2023Last Visited
User
Activity
User
Profile
Latest posts by SeanDeHarris
| Subject | Views | Posted |
|---|---|---|
| 154 | 09-19-2023 06:39 PM | |
| 128 | 09-18-2023 12:20 AM | |
| 110 | 09-18-2023 12:11 AM | |
| 153 | 09-17-2023 11:59 PM | |
| 271 | 09-11-2023 11:12 PM | |
| 279 | 09-11-2023 10:55 PM | |
| 96 | 09-11-2023 08:44 PM | |
| 316 | 09-11-2023 08:39 PM | |
| 222 | 09-07-2023 03:37 AM | |
| 339 | 08-13-2023 07:54 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-31-2022 12:28 AM | |
| 3 Likes | 02-07-2022 01:15 AM | |
| 1 Like | 01-25-2022 06:13 PM | |
| 1 Like | 01-24-2022 07:01 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 2 Likes | |||
| 4 Likes | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 06-11-2021 01:25 AM |
| Date Last Visited | 09-28-2023 03:12 AM |
| Posts | 41 |
| Total Likes Received | 6 |
09-19-2023
06:39 PM
Those decoy files are hidden and located in several folders ... hehe
... View more
09-18-2023
12:20 AM
XDR will inject DLL to monitor for exploitations on the files being opened. It does not posing any significant impact to the process performance.
... View more
09-18-2023
12:11 AM
May consider to Build you own BIOC rule and play around with XQL query
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Create-a-BIOC-Rule
... View more
09-17-2023
11:59 PM
Dear experts,
From the following resource table, two json tables for GCP are provided (one for Google subnet and another for Google IP range associated with my region)
Question:
For the connectivity, do we need to allow all GCP IP range (in the json file) or just those IP ranges associated with my region chosen (my Tenants)?
Is there an easier way to import the json file to my firewall and create the network object???
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Resources-Required-to-Enable-Access
Your comments will be appreciated.
Many thanks.
... View more
09-11-2023
10:55 PM
@neelrohit Thank you so much for the reminder,
To be exactly, both v7.5CE and v7.9 CE are not available when we create the agent installation package.
This seems to be a unknown *situation* because this symptom happens to few of my tenants.
... View more
09-11-2023
08:44 PM
@mavraham
Thanks for your reply, I'm not familiar with the legal and regulations.
Now, UK is not part of EU.
Just wondering if I create the tenant in UK with agents located in other EU, can it be compliance?
thanks
SDH
... View more
09-11-2023
08:39 PM
Hello experts,
From the matrix, v7.9 supposed to be the last version to support Win7, just found out 7.9 has been removed from the Agent installation while creating an installer.
Do we need to "downgrade"/use much older v5.0 instead???
Thanks,
SDH
#installation
#windows
Cortex XDR
... View more
09-07-2023
03:37 AM
Hello experts,
We have a branch in EU and UK
For easier management , just want to have single tenant for both.
Is it possible?
Under GDPR scheme, should I host one tenant for both UK and EU. is it possible?
Which one should I choose??
Thanks
SDG
... View more
08-13-2023
07:54 PM
Hi XDR Experts,
For reasons, we need to migrate all the agents from existing "tenant A" to a new "tenant B" before the old one expires.
Is there any automated/faster way to do so?
Or we need to do it manually with bunch of export and import, change to the new managing server in the old tenant.
For manual procedure that come up to my mind,
1) Activate new tenant
2) Under old tenant, Export profiles (malware, exploit, agent setting, device control configuration, Disk Encryption Profile ), policies, exception rules, host firewall rules, global exceptions
3) Under new tenant, Import the settings from step2.
4) Generate new agent installer ( Agent Installation Id) in new tenant
5) Change managing server with Agent Installation Id (step 4) in the old tenant.
6) Confirm the agents appear in the new tenant.
Is there any missing?
Your comments are welcome.
... View more
07-24-2023
08:41 PM
Hello, experts,
Found out the Device control which can be temporarily allowed to my USB device when my EP is connecting to the Internet/XDR Portal.
Just wondering if we could temporarily allow the USB without (the EP) connecting to Portal?
Thanks,
SdG
... View more
07-10-2023
12:14 AM
Hi team,
Got a renewal quotation with new XTH module.
Heard eXtended Threat Hunting ( XTH ) Module is about query the raw data for threat hunting.
Still not so sure what is the new module is used for ?
What is the use case to purchase this lic in addition to XDR Pro.
Without the XTH, what is limited when comparing with XTH lic on?
Regards,
SDG
... View more
07-10-2023
12:08 AM
Thanks for your reply.
I'm not sure where to locate data.type = "malware', is it under dataset = xdr_data or other dataset?
... View more
06-30-2023
03:25 AM
Hello, just want to showed the Malware incidents and the related-malware filename in the dashboard, what should i choose for the XQL.
thanks
... View more
02-20-2023
01:19 AM
Hello experts,
How would the Wildfire (submission) on firewall deal with these types 1) password protected zip 2) password protected 7-zip 3) password protected RAR?
would it automatically submit by Firewall or need manual submit thru Wildfire portal or API?
any ideas?
Thanks
Harris.
WildFire
... View more
WildFire
Palo Alto Networks
WildFire
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-28-2023
03:12 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks