Cortex XDR Discussions

Creating a stacked bar chart using XQL

I am creating a stacked bar chart that shows the number of alerts per data source per day.
Is it possible to display the data source in the displayed graph?

The stacked bar I created shows the time.
※Whatever I select for the X-axis will be displayed

XQL query for vulnerability

Hi. i need to do monthly report for vulnerabilities. So how to create like a trend report for 30 days

here is just example for get count, but how to do  trend report?

dataset = va_cves 
| filter severity >Medium
| filter affected_hosts_count >1
| fields

how to uninstall a package using rescue mode in Debian

my debian server crushed, wa are unable to acces the server(VM on OVH baremetal) using ssh(hard disc), we can usig rescue mode using the root user. after investigation we found that, it is a network problem due to Cortex, now my question is is there

Malware Scans on Linux Endpoints

Hi Team,

Can you please confirm we can run malware scans on linux servers and linux virtual appliances? We want to create a policy in XDR to run periodic malware scans on the servers (Specially linux servers and linux virtual appliances). 

Regards,
Saks

The USB Read-Only policy causes the USB drive to fail to mount

I have set a USB Read-Only policy under Policy Management Extensions -> Policy Rules and Profiles. When a USB drive is inserted into an endpoint, Cortex XDR triggers a notification indicating that the USB is mounted as read-only, but in reality, it i

Cortex XDR blocks MalwareBytes

After a recent update to MalwareBytes Cortex XDR is now detecting and blocking it.

Has anyone else seen this, and is there a was to allow the MalwareBytes Digital Signature? I prefer not to have to allow the hash for each version.

XQL/BIOC - web

Hello,

Can you tell me in which dataset I can find the following data?

• URL addresses
• User Agent

With this information, can we create a rule that is based on defined values ​​and then generate an alert based on it or block it within the Restriction

Cannot update user role to another user

This is about user permssion settings, I'm already the account admin of the XDR tenant already.
Currently, the user scope is set to all, i want to change the scope for specific user.
But there is no update user permission when right click on user 
does

XQL Timeseries Chart

I'm trying to build a timeseries chart that counts alert volume per day and that fills in zero values for days with no data. I have the following XQL that populates days with data but I'm unable to fill in a zero for all other days between now and th