Resolved! A question from the Endpoint Administration Part 2 webinar: Linux machines & Kernel Updates

There are some instances of Linux machines that are protected previously and then became unprotected or partially protected. As per checking on them, it was because the kernel version was upgraded to the latest version and is still not listed on the

Resolved! host inventory - Disk Space XQL - bytes conversion not possible because of string - to_number?

Hello dear community, 

how can we get this use case running? I need to know which disk is running lower than 5 GB. 

In my case I have a conversion problem, because the field free_space is a string. How can I convert it to a number, so I can divide

Resolved! The Logic behind Widgets on XDR

Hello , 

Recently we observed that during time period of last 7 days when we use the widget Incidents by source it shows us of a total 7 incidents but when we check manually with the same timeframe it shows us only 6 overall incidents. How does thi

Resolved! XQL Query for incidents/alerts

Hello , 

Is there a way to create XQL query for the details related to incidents or alerts for past 7 days that can be used as a widget . The current widget options do no give us the output we require.

Thanks 

Resolved! Perform Memory Acquisition Using XDR

Hi,

Is it possible to acquire memory using Cortex XDR for digital forensics? We are not looking for process dump but a complete memory dump of the system which we can further use with tool like volatility or something.

Thanks in advance.

Regard

Resolved! Bad Driver Blocks

Hello dear community, 

Are these drivers, signers, etc. blocked by CORTEX XDR Pro? 

it is a copy of the official provided list from Microsoft. 

https://github.com/Harvester57/CodeIntegrity-DriverBlocklist/blob/99534db767c7c71826fa70d43f28a25b3cf7

Resolved! Does Cortex XDR Device Control blocks mobile hotspots through USB?

Hello!

I recently had this situation where a computer with a security policy with every setting in device control set to block allow internet connection through USB + smartphone. 

Did you have any similar situations? I have checked device control

Resolved! XDR Cortex Event Forwarding into AWS S3 bucket

Hi!
I am looking for a way to export raw endpoint data from Cortex XDR to AWS S3 bucket,

I saw in the Event Forwarding option that it's possible to export these logs into Google Cloud Platform (GCP) bucket,

so I look for a similar option just into AW