About RamyashreeMada

Hello Team,   We need to create automated XDR report to detect executions of “Python.exe” and “PowerShell.exe & PowerShell_ise.exe” in our environment. Can we query a incident/alerts to make a report or suggest us how we can generate reports based on the above requirements. Can we configure a scheduler in this report so that all the intended recipients would receive this report.   ... View more

Hello,   For Scans applied through polices for the pending machines how long the scan command remains upon scan initiation. for eg: I enabled scan policy on Monday the system was in disconnected state on that day and it comes back online on Thursday will the policy applied to it and initiate the scan on that system. Note: The policy will be not disabled. Few scan are getting failed due to the user cancel scan manually. Is there any notification sent to the user once the scan is initiated. if yes is there any way to disable the notifications and is there any option to disable the access to the user to cancel the scan. ... View more

Hello,   Could you please help us to understand few queries related to exceptions:   1. How do we create global exceptions for the file paths. 2. Adding exceptions for the files in endpoint scanning module of the profile will only exclude these files for scanning or other modules also is this exclusion applicable?   ... View more

Hello,   We need to add a global exceptions on the paths. Currently we have added file paths in endpoint scanning allow list. So can you confirm if we exclude in this scan does it applicable for other profile like Portable Executable and DLL Examination, Anti Webshell Protection, Global Behavioral Threat Protection Rules, etc.. ... View more