There is an option Response Action under agent configuration, which means we can allow access to a certain application in case the endpoint is isolated.
Which application access should ideally be provided in it.
Thanks
Hello Team,
Could you please provide the benefits of Network Location Files in restriction profile.
I have seen alerts screenshot on internet where an alert triggered after matching a Yara rules.
https://attackevals.mitre-engenuity.org/enterprise/participants/paloaltonetworks?adversary=carbanak-fin7&view=results&scenario=1
(Fourth Screenshot)
Does C
...
Hi All,
Can XDR be installed on VM deployed via Azure marketplace images?
Thanks
All,
Trying to write a XQL query to search for this Windows command line when executed. Can anyone tell me how to distinguish the command line parameters "domain computers" in XQL? Thanks.
actor_process_command_line = "%systemroot%\system32\net.exe
...
Hello ,
Does anyone know the difference between the Malware scan initiated from console and Scan initiated by user locally for all drive? Does cortex XDR also scans the memory and registries in the full scan initiated? and how long it should take a
...
We have concerns about the Evil Extractor malware posted here: https://www.fortinet.com/blog/threat-research/evil-extractor-all-in-one-stealer
I have not been able to find anything on the PA Cortex or Firewall Pages and need to get information back to
Hello dear community,
my supervisor needs a monthly report about still vulnerable agents.
I got allready an XQL, which I used for the dashboard.
config timeframe between "-1y" and "+5d"
|dataset = host_inventory
| arrayexpand kbs
| alter kbnr =
Hello dear community,
how could this keywords be integrated into cortex xdr pro?
https://mthcht.github.io/ThreatHunting-Keywords/
happy hunting!
BR
Rob
Hello all,
I am trying to setup SSO on my XDR tenant but I am getting the following message when login in
Unauthorized. Error 4011
In the console, the status is 401 Unauthorized
I followed this video https://www.youtube.com/watch?v=nwF3hY3wgc0
...
Hello dear community,
do we need to setup our own bioc, or will this come as a standard rule from PA?
https://twitter.com/malmoeb/status/1671453836605550592
BR
Rob
hi,
I have this message on more windows server 2019(vmware environnement), after install cortex 7.1:
Server certificate for host is not allowed: error=19, message=self signed certificate in certificate chain
HTTP request failed due to an SSL error (0)
...
why brokervm showing disconnected in xdr console how to do get to know what had happen and how get in connected state.
Hello,
we wonder if we can install cortex aarch64 on a raspbian.
Does anyone try that?
Thanks
I am having an issue with an installation of XDR on Linux Mint 20.
I found this post with no resolution and one of the comments from @MartinSauer suggests someone else was seeing the same issue.
LIVEcommunity - ERROR:14090086:SSL routines: SSL3_GET_
...
