This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About timurphy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About timurphy
01-27-2023
11Posts
4Likes
4Solutions
Jan 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by timurphy
| Subject | Views | Posted |
|---|---|---|
| 33 | 01-26-2023 08:07 AM | |
| 46 | 01-24-2023 08:58 AM | |
| 57 | 01-24-2023 08:55 AM | |
| 73 | 01-24-2023 08:32 AM | |
| 62 | 01-24-2023 08:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-24-2023 08:19 AM | |
| 1 Like | 01-11-2023 09:47 AM | |
| 1 Like | 01-03-2023 07:29 AM | |
| 1 Like | 09-14-2022 08:23 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 7 Likes | |||
| 1 Like | |||
| 7 Likes |
User Badges
Community Statistics
| Member Since | 08-17-2022 08:06 AM |
| Date Last Visited | 01-27-2023 12:34 PM |
| Posts | 11 |
| Total Likes Received | 4 |
01-26-2023
08:07 AM
Hi @Pattarachai-FTH,
This can be accomplished by using the Get Endpoint API. Within your request body, you can filter on the last_seen field with your desired time range. Keep in mind that the expected input is epoch milliseconds for this particular field.
If you are new to working with the Cortex XDR API or APIs in general, you may benefit from viewing the Intro to API Webinar.
... View more
01-24-2023
08:58 AM
This looks to be a duplicate post of the following: https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/download-the-freshly-created-xdr-distribution-file/td-p/528344
Please see the answer provided there to continue the discussion.
... View more
01-24-2023
08:55 AM
Hi @NitinYadav,
When building a report template, you can choose to output CSV files based on custom XQL widgets in addition to the PDF of the selected widgets. This can help in scenarios where you want to view/manipulate the underlying raw data (from selected custom XQL-based widgets) in a spreadsheet application, for example.
As for additional report output types, please consider raising the request to your Customer Success Team or Account Team for consideration as a feature request.
Regards,
Tim
... View more
01-24-2023
08:32 AM
Hi @RFeyertag,
This is by design on Windows Server operating systems: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-New-Agent-Settings-Profile
See the relevant excerpt from the Agent Settings documentation below:
( Windows only) Configure Windows Security Center Integration.
The Windows Security Center is a reporting tool that monitors the system health and security state of Windows endpoints on Windows 7 and later releases:
Enabled—The Cortex XDR agent registers with the Windows Security Center as an official Antivirus (AV) software product. As a result, Windows shuts down Microsoft Defender on the endpoint automatically, except for endpoints that are running Windows Server versions. To avoid performance issues, Palo Alto Networks recommends that you disable or remove Windows Defender from endpoints that are running Windows Server versions and where the Cortex XDR agent is installed.
... View more
01-24-2023
08:19 AM
1 Kudo
Hi @r_buchwalder,
The URL provided in the response from the "Get Distribution URL" API is signed and only lasts for a short amount of time. You can download the file by making a GET or POST request directly to that URL with the standard headers (Authorization, x-xdr-auth-id) as you would for any other XDR API call. For example, here is how you can make such a request with curl to download the installation package from the distribution_url:
curl --location --request POST 'DISTRIBUTION_URL_GOES_HERE' \
--header 'Authorization: API_KEY_GOES_HERE' \
--header 'x-xdr-auth-id: API_KEY_ID_GOES_HERE' \
--output '/path/to/file.msi'
I hope this helps!
Regards,
Tim
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-27-2023
12:34 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks