This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About PierazzoD
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About PierazzoD
02-13-2023
7Posts
0Likes
0Solutions
Feb 13, 2023Last Visited
User
Activity
User
Profile
Latest posts by PierazzoD
| Subject | Views | Posted |
|---|---|---|
| 447 | 11-09-2022 08:32 AM | |
| 745 | 05-23-2022 05:52 AM | |
| 1088 | 05-12-2022 04:34 AM | |
| 2324 | 01-27-2022 06:40 AM | |
| 2719 | 01-27-2022 02:10 AM |
User Badges
Community Statistics
| Member Since | 08-03-2021 01:55 AM |
| Date Last Visited | 02-13-2023 09:45 AM |
| Posts | 7 |
11-09-2022
08:32 AM
Hi,
I wonder if there is a method to export the excluded alert from a Cortex XDR tenant and import this exported excluded alert into another Cortex tenant.
If I export the alert from the console filtering the alerts excluded=yes, I can download a .tsv file, but I don't know how to import this exclusions in the other tenant.
I also tried to use API keys, but if I would to filter the alerts by excluded=yes, I received the error that "excluded" isn't a valid filter field.
How can I do this thing? If it is possible
... View more
05-23-2022
05:52 AM
Hi all, I have a collaborator that is trying to change his password, but when he clicks on "forgot password" link, the portal says the mail is delivered, but he doesn't receive any mail from the "noreply@paloaltonetworks.com". When i do a message trace in 365 Exchange, there's no mail from Palo Alto to the mail desired. I'm sure the mail address is correct. Have you got a solution? Thanks all
... View more
05-12-2022
04:34 AM
Hello everyone, the problem started a day ago, when Cortex XDR started to trigger the behavioral rule "other.malware_gen_task.105" on the service "System", when executing the child processes "smss.exe", "registry" and "memorycompression". It started without any previous changing. Have you got some information about this topic? Thanks
... View more
01-27-2022
06:40 AM
I've controlled the permission of the user and seems to me that it has the right privilege. these are the log i got from event viewer of Windows log1: Log Name: System Source: Service Control Manager Date: 27.01.2022 12:33:35 Event ID: 7000 Task Category: None Level: Error Keywords: Classic User: N/A Computer: MyServer.Domain Description: The cyvrmtgn service failed to start due to the following error: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7000</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2022-01-27T11:33:35.055852400Z" /> <EventRecordID>1005547</EventRecordID> <Correlation /> <Execution ProcessID="1056" ThreadID="3788" /> <Channel>System</Channel> <Computer>ITSPDB01.intranet.salewa.com</Computer> <Security /> </System> <EventData> <Data Name="param1">cyvrmtgn</Data> <Data Name="param2">%%577</Data> </EventData> </Event> Log2: Log Name: Application Source: MsiInstaller Date: 27.01.2022 10:11:37 Event ID: 1033 Task Category: None Level: Information Keywords: Classic User: DomainAdmin Computer: MyServer.Domain Description: Windows Installer installed the product. Product Name: Cortex XDR 7.6.0.43778. Product Version: 7.6.0.43778. Product Language: 1033. Manufacturer: Palo Alto Networks, Inc.. Installation success or error status: 1603. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MsiInstaller" /> <EventID Qualifiers="0">1033</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2022-01-27T09:11:37.000000000Z" /> <EventRecordID>17677055</EventRecordID> <Channel>Application</Channel> <Computer>ITSPDB01.intranet.salewa.com</Computer> <Security UserID="S-1-5-21-861567501-484061587-725345543-500" /> </System> <EventData> <Data>Cortex XDR 7.6.0.43778</Data> <Data>7.6.0.43778</Data> <Data>1033</Data> <Data>1603</Data> <Data>Palo Alto Networks, Inc.</Data> <Data>(NULL)</Data> <Data> </Data> <Binary>7B46364144333634302D434530432D344539312D413446392D4343313836433530464335337D3030303033656464653732656261356330373032353264656631623930346337623261643030303030393034</Binary> </EventData> </Event> I've tried also with localadmin of server, but i've always the error at the moment to start new services (cyvera).
... View more
01-27-2022
02:10 AM
The OS is Windows Server 2008R2 SP1 I've tried also with that command and it failed. In the zip there is the log file of the installation, it fails to start dependance services.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-13-2023
09:45 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks