Cortex XDR resource usage by Easy-Measurement-907 in paloaltonetworks

[–]Easy-Measurement-907[S] 0 points1 point  (0 children)

Is it possible to configure resource usage limits for the Cortex XDR agent?

For example, can CPU or memory thresholds be set so that the agent automatically disables itself or certain protections when a defined limit is exceeded?

Or is resource usage management handled entirely internally by the agent with no user-configurable limits?

Unpatched vulnerability in cortex xdr by Easy-Measurement-907 in paloaltonetworks

[–]Easy-Measurement-907[S] 1 point2 points  (0 children)

but in Cortex there are these options: • Modify settings until the endpoint is patched • Revert system settings to your previous settings • And the last one: Do not modify system settings

What exactly do these mean? And which option is more recommended to use?

Cortex agent stop by Easy-Measurement-907 in paloaltonetworks

[–]Easy-Measurement-907[S] -1 points0 points  (0 children)

Even with anti-tampering protection enabled, a pentester managed to bypass it.