Cortex XDR allows you to rapidly detect and respond to threats across your networks, endpoints, and clouds. It assists SOC analysts by allowing them to view ALL the alerts from all PANW products in one place, telling the full story of what actually happened in seconds and allows seamless response.
Please note: All postings in LIVEcommunity are visible to other users; please keep your network secure by refraining from posting live IP address’s or domain names here. Contact your Customer Success team for network-specific questions.
Hi all,
Can you please guide me that how to activate Cortex XDR tenant account?
Thanks in advance!
Really appreciate the help.
I wanted to get everyone else's 2 cents here and see how other people are doing it. My goal here is to prevent writing data to unapproved removeable media but allow reading. I created an device configuration extension profile with disk drives set as
...
Hello,
Is there any way to set up an alert for each time a USB device is plugged into a host?
Even if it's not malicious.
Hello!
I'm new around here and I have a question.
How to make Cortex XDR console to be accessible only to domain users?
So only users connected to the domain network can access the Cortex XDR Console.
It'd be very helpful if you provide related document
...
Attached images show the pop-up that is going around our network this morning. Unlike before where it would list the program Cortex blocks there is nothing there and is pointing at Microsoft for the cause.
Is this a false positive? A windows servic
...
Hello everyone,
the problem started a day ago, when Cortex XDR started to trigger the behavioral rule "other.malware_gen_task.105" on the service
"System", when executing the child processes "smss.exe", "registry" and "memorycompression". It started wi
...
Hi
hope this is the right place to ask this question
We were given a temp user to play around with the Cortex XDR and we are trying to insert some dummy data into it.
I am trying to insert data using an Http logs collector, following this guide
unfortuna
Hello Admins,
We use Analytics BIOC Rules. But where is the Causality Change? No of alerts rising, but where to see who, why and what?
Thank you!
BR
Rob
I am working with a multi-tenant XDR configuration and I would like to differentiate between the Alert Emails to ascertain from which tenant the Alert has been produced . For example: Tenant 1 and Tenant 2 (mssp). When I receive an email notification
...
Hi Community,
Is somebody able to explain if Cortex XDR Pro is able to find the origin process if you have the DNS Query? A lot of windows internal process uses rpc calls to a svchhost.exe, which then makes the dns resolving, which is cortex xdr pro t
We have some servers in our environment that have a lot of files. The scans are scheduled for 2am Saturday mornings, but do not complete within 24 hours and the scan times out and is then cancelled.
What are the steps to remediate this.
Hi Team,
I'm seeing the different tenant address in Cortex xdr agent console it is connecting to another management server,
Could someone please help me to replace the correct managing server name,
Because currently that agent is not reporting to Cort
...
Just posting, if this is useful for someone who might be hunting for Kerberos Relay Up (Privilege Escalation on Windows System) Activity.
The purpose of this hunt is to look for suspicious logon on windows system using Kerberos Auth Package where the
...
Hi, I have a rather peculiar issue(?) with one of my agents.
Said agent is working as intended, however it blocked a certain file form running under "Local Malware Analysis". which is fine, but I did not receive any alert nor incident in the manageme
...| Subject | Likes |
|---|---|
| 3 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 4 | |
| 4 | |
| 2 | |
| 2 | |
| 1 |
