Investigate files - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-10-10
Category
Administrator Guide

You can take actions to manage and investigate files, including:

  • Manage file execution on your endpoints by adding file hashes to your allow and block lists.

  • Quarantine files and manage the files automatically quarantined by Cortex XDR.

  • Review the file verdict and the WildFire Analysis Report for a file.

  • Import hashes from the Endpoint Security Manager or from external feeds.