About justin_smi

justin_smi · ‎04-21-2023

This very helpful thank you. We did only purchase 50 licenses so I've gone the route of using tags help us mange the profile distribution to make it easy to add and remove devices that are using forensics. Thanks again.

justin_smi · ‎04-19-2023

Does anyone have any tips or things they do to get the most out of the add-on? I'm just getting it configured it as my company purchased a few licenses for it. I think I've got it configured correctly in the agent settings but I'm also second guessing myself a bit on that as well. The documentation from Palo Alto hasn't been great on making sure that it is being used to its full potential. This is the only documentation I've found regarding the add-on: Forensic Data Analysis • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks documentation portal Thanks!

justin_smi · ‎03-27-2023

You can disable the alert by going to this page, finding the rule, right-click 'disable'. Just fill in the url with your tenant name and region and it should work. https://<tenant>.<region>.paloaltonetworks.com/rules/analytic-bioc

Member Since	‎09-20-2022 12:25 PM
Date Last Visited	‎05-17-2023 05:24 PM
Posts	3
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎05-17-2023 05:24 PM

About justin_smi

Re: Forensics add-on || How-to get the most out of it

Forensics add-on || How-to get the most out of it

Re: Content Release Notes

Re: Forensics add-on || How-to get the most out of it

Re: Detection Logic For CVE-2023-23397 - Microsoft Outlook

Re: Forensics add-on || How-to get the most out of it

Re: Forensics add-on || How-to get the most out of it

Forensics add-on || How-to get the most out of it

Re: Content Release Notes