The Cortex XDR agent app for Android prevents known malware and unknown APK files from running on your Android endpoints. The Cortex XDR agent app enforces your organization’s security policy as defined in Cortex XDR. The security policy determines whether to block known malware and unknown files (recommended), uploads unknown files for in-depth inspection and analysis, treats grayware as malware, and performs local analysis to determine the likelihood that an unknown file is malware. You can also add trusted signers to the Allow List to enable unknown apps that are signed to run before Cortex XDR receives an official verdict for the app.