XDR policy targeting using AD

Hi there,

When we are trying to target a policy using AD group some of the listed endpoints is not a member of selected group.

To get more clarity we selected a group which only contains users and even then the result listing some random endpoints.

Is

Cortex XDR with Carbon Black

Hi All,

  I know it is a stupid question but I am encountering this situation that we need to install Cortex XDR working with Carbon Black (it's a long story). May I know if anyone experienced this before or any suggestions on exclusion? Thank you so

Using Windows environment variables in XDR Firewall

Hello,

Configuring host firewall via XDR and I cannot seem to get the Windows environment variables running.

Basically, there's an implicit deny for inbound/outbound connections, so there are applications that require some internal/localhost connectio

Who/How to send feedback on "Cortex XDR Scheduled Maintenance on January 17" email notification?

Hello Livecommunity
I believe there are Palo Alto representatives that do some level of monitoring and participation in this Forum, would they or someone know where you provide feedback to enhance notifications such as the one listed above, that descr

Log storage and resources usage

Hi everyone!

How much space do the cortex xdr agent records use? I understand that in the agent profile configurations you can set the quota for log storage, by decreasing the quota the logs are automatically purged ??, for the last one on my machine

Recent Change - creation of Threat ID #8002 Alerts in Cortex

Hello all, 
Beginning on or around 14/15 December, I began to notice we were commonly generating the following Alerts in Cortex:

Alert name: Threat ID #8002

Description: Scan Detection

Alert Source: PAN NGFW

Category: Scan Detected via Zone Protection Pro

The Cortex XDR version upgrade on my computer is not progressing from "In progress".

The Cortex XDR version upgrade on my computer is not progressing from "In progress".

When grouping and upgrading some agent has stuck on "In Progress" situation, we cannot even cancel and stop it.

Even rebooting the computer and then upgrading again do

Cortex XDR Threat Hunting Community

Hi All,

Is there there threat hunting community for Cortex XDR?

Cheers

Cortex XDR Alert Dump File Analysis

Is there a way we can analysis the dump file when a behavior based alert is generated for an incident? We would like to analysis the process dump file with volatility for windows 10 machines.

Thanks for the help in advance.

How to check receive log from fortigateVM64 on VM broker syslog collector

How to check receive log from fortigate VM64 on VM broker syslog collector?
I setup log fortigate VM64 pattern as by Cortex xdr manual but no log from FortiGate send to Cortex Data Lake.