About fmoixsante

Hi @rtsedaka,   Is Google Chrome Helper being blocked by XDR? if yes, which alert type? Local Analysis? Wildfire? Suspicious Process Creation?   ... View more

Hi @Aiman_Fathima ,   It seems it is still not clear who the incident and alert process work in XDR. You do not resolve alerts, you resolve incidents. When you set the status of an incident "Resolved-xxx", you get the option to "resolve" the associated alerts. In the Alert table, you have the column " Resolution Status ". This column allows you to know if the alert was handled. The alerts will NOT disappeared. You can hide them by using filters, though.    There are 2 ways to "resolve" alerts. One by resolving incidents, another by changing the resolution status directly on the alert.   And  remember that you need to work from the Incident view and not from the Alert table directly ... View more

Hi @Aiman_Fathima,   Even though, you have the possibility to resolve alerts from the Alert table, you need to work on the Incidents and close those. If you are looking at the Alert Table, right-click on an Alert and go to Pivots to views > View related incidents. You can also add the column Incident ID to the Alert table. But remember that you need to work from the Incident view and not from the Alert table directly. ... View more

@pedrodias2020    If you are trying to uninstall on a Windows machine, I would suggest you also look at the XDR agent admin guide. In the uninstall section, it is explained how to use admin cmd and the msiexec method to uninstall the agent. Just remember that you need to have the same installation package version as the one installed locally for the method to work.   You could also open a TAC case explaining the situation. It is quite odd that after you disable protections, the agent doesn't uninstall.  ... View more