Malware Profile - Ransomware Protection

Hello community, does anyone have more information pertaining to Ransomware Protection (Protection Mode) between "Aggressive" vs "Normal"?

From what I understand is that aggressive mode will have decoy files being created on the local machine. 

JAVA Query for Cortex XDR

is it possible to create a query to detect a specific java injection process?

Regards,

Shashank

CPU Utilization is high

Why does cortex XDR increase cpu usage ?

And after agent upgradation does cpu usuage increase?

what all other factors are there for high cpu utilization because of cortex xdr?

Authorization Disk encryption visibility

Hello dear community, 

I'd like to make the Disk encryption visibility module visible to our trainee. How is it possible, I couln't find any possibility. 

BR

Rob

Cortex XDR collects usage metrics

Hello,

Can cortex xdr collect usage metrics?

XQL Search- to get the source of the file

I want to know the XQL query or filters which helps in the analysis of alerts & to know the source of file where it is coming into our system.

For example- whether user downloaded the file from browser or someone sent through outlook, from portable d

Cortex XDR P2P

Hi,

someone please elaborate XDR P2P how happens and how xdr elect one peer agent in the LAN.

URL Exception

Hi Team,

Does Cortex XDR support URL filtering. We have a request to whitelist a URL on XDR in order for user to be able to access it. 

Wondering if this is even possible by XDR or should be taken care at proxy level.

Thanks

Compatiblity Check

Hello,

Is XDR compatible on Qualys virtual scanner appliance. It is a azure based Linux server.

Directory Sync usage

Hello everyone,

Just curious who uses the Directory Sync tool out there? If you use it would you mind sharing a quick like/dislike about it? I really want to incorporate it into our environment but not entirely sold on it... yet. Any feedback about it

User Role Change - Account Admin

Hi Team,

Who can change user role access for account admin ? Instance administrator does not have access to change it. #UserRole #CortexXDR

Regards,

Gokul K

XDR Scan

Hello Team,

Whether files can be quarantined during the AV scan.

2-Factor Authentication

Hello,

Can we change  authetication options while logging in to cortex xdr?

While logging in first time on cortex XDR we selected google authenticator but mistakenly google authenticator app got deleted from phone  and after re-installing it is una