Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Cortex XDR Discussions
Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
About Cortex XDR Discussions

Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.

Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.

Discussions

Resolved! Detect and Restrict Powershell cmdlets

Hello everyone,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion about taking action against powershell cmdlets.

After sev

...

agirones by L1 Bithead
  • 191 Views
  • 4 replies
  • 0 Likes

Forensics free trial license expired

Helllo everybody, 

 

I have a Cortex XDR Pro per GB and I've acquired a "Forensics" free trial license, which expired yesterday. I need to access the results of the forensics, would i be able to do it? or do i need to renew my license?

 

Awaiting any

...

loropeza by L0 Member
  • 220 Views
  • 1 replies
  • 0 Likes

False Positive (GitButler)

All versions of GitButler are falsely flagged by Cortex XDR.

The corresponding GitHub issue can be found here: https://github.com/gitbutlerapp/gitbutler/issues/3518

 

The hash is related to version 0.11.1

 

Component: WildFire
Cortex XDR code: C040005

...

Resolved! Cortex XDR dashboard into Grafana?

 

J.JohnsonRock
L0 Member
 
 

am ‎04-08-2024 11:02 AM

Hello, I don't know if I'm in the right place...

I would like to integrate our Cortex XDR dashboard into Grafana. I know this is possible via an API, but which connec

...

JJohnsonRock_0-1712642428134.png

Resolved! Automation rule to add IP address to EDL

Is it possible to create an automation script or rule to add a remote IP address to an EDL in Cortex XDR?  I'm exploring the best way to handle this.  For example, after the recent CVE-2024-3400 disclosure, I patched my firewalls, and all is good.  H

...

Cortex XDR Upgrade from Pro to per GB

Hello dear community, 

 

we would like to ingest logs for more visibility. 

Actually we have Cortex XDR Pro. 

How does the upgrade path look like to get the ability to ingest FW and Windows Event logs? 

How much more we need to pay and how does the l

...

RFeyertag by L4 Transporter
  • 165 Views
  • 2 replies
  • 0 Likes

Resolved! BIOC API access

Hello Folks,

In the Cortex API documentation there is not mention of how to make BIOC rules using APIs or how to access them.

I was wondering if anyone has been able to use the API to create BIOC rules.

  • 1785 Posts
  • 78 Subscriptions
Top Solution Authors
Top Liked Authors