Cortex XDR Discussions

XDR agent was successfully installed on CentOS, but it is visible on endpoints all endpoints

XDR agent was successfully installed on CentOS, but I saw it on endpoints all endpoints. I checked the installation logs to ensure that it was installed successfully.

The XDR agent communicates through the broker VM, and their communication is also

Cortex XDR DNS Collectors

Hi community,

I have a query regarding Cortex XDR collectors. When installing collectors on the local DOM servers, what types of logs does the Cortex XDR console retrieve? How can these logs help with the investigation of incidents?

Move Cortex XDR agent from one tenant to another (and back)

When we move an agent to a new management server, what would happen to the logs and telemetries we have on the old tenant? Would they be retained as per the usual policy or would they just get purged?

Also if we then move it back to the old tenant,

Upgrade agent failed

I have encountered the following issue of failed agent upgrade on a Windows laptop, showing the following message:

XDR Agent failed to upgrade from version 8.4.0.51691 to version 8.5.0.624 on LAPTOP-xxxxxxx with error: Windows Installer DB: Current

BIOC RULE Creation - Workstation IP changed

Hi,

How we can monitor the scenario like,  when a cortex connected workstation's IP address change?

Whether it is possible to create a rule/bioc in cortex xdr for monitoring the above mentioned scenario ?

Cortex XDR Cortex Data Lake 

Thanks

Chr

GPU passthrough in VM (hyper-v) gets roll back automatically

I am using Hyper-v VM's on windows 2019 server 

After automatic deployment (not managed by me) of Cortex XDR agent version 8.4.0 on that server 

Assigning GPU's from host to the VM's getting roll back automatically within seconds in front of my eye

Email Alerts

The alerts we receive in email are detailed with a code box that can be very long and difficult to read especially through a mobile device. Is there options to make these alerts more user and mobile friendly?

XQL query for browsers installed or in usage on host + Host_name.

Hi,

I need to find which browsers the users using for daily tasks.
I'm looking for a XQL query for browsers installed or browsers in usage by the user + hostname,
The date that the app installed and the version is not so important as long as i get the b

XDR Agent Stop 8.3.0

Hi, I would like to know if anyone has experienced this problem. Sometimes, without any apparent reason, the Cortex XDR Agent version 8.3.0 stops responding on Windows Server 2016 servers. When we check the services, the service is stopped

We restart

Panorama integration

Hello,

Have anybody integrate with Panorma? There is an option to do so under the NGFW integration:

How exactly does it work? 

I have integrated XDR with NGFW and everything works fine, logs are collected, but I am wondering what is the use case t

Agent 8.3.2 not showing in the Agent list in the Instance

Hi Team,

As shown in the "Cortex XDR Agent Release" official document that 8.3.2 has been released on June 24th 2024, but we are not getting that agent version in our instance "Agent Installations".