The Cortex XDR Agent app for Android prevents known malware and unknown APK files from running on your Android endpoints. The Cortex XDR Agent app enforces your organization’s security policy as defined in Cortex XDR. The security policy determines whether to block known malware and unknown files (recommended), upload unknown files for in-depth inspection and analysis, treat grayware as malware, and perform local analysis to determine the likelihood an unknown file is malware. You can also whitelist trusted signers to enable unknown apps that are signed to run before Cortex XDR receives an official verdict for the app.