Details

This workflow appears in the pivot menu and allows a user to trigger an endpoint scan in Palo Alto Networks Cortex XDR.

Description

This workflow appears in the pivot menu and allows a user to trigger an endpoint scan in Palo Alto Networks Cortex XDR. Supported observables: hostname, IP address, PAN Cortex XDR agent ID

Target: Palo Alto Networks Cortex XDR - v1

Steps:

  • Determine which observable type was provided
  • Request the endpoint scan
Required targets

This workflow requires the following targets to be available before it can be run.

Integration targets

  • Palo Alto Networks Cortex XDR
About
Author
Cisco
Version
v1.4
Intent
Pivot Menu
Average rating
No ratings yet
Authorship
Cisco Managed
Contact and support information
External links
Related workflows
Cisco Managed
This workflow appears in the pivot menu and allows a user to add a file hash to an allow list in Palo Alto Networks Cortex XDR.
Cisco Managed
This workflow appears in the pivot menu and allows a user to add a file hash to a block list in Palo Alto Networks Cortex XDR.
Cisco Managed
This workflow appears in the pivot menu and allows a user to isolate an endpoint in Palo Alto Networks Cortex XDR.
Cisco Managed
This workflow appears in the pivot menu and allows a user to trigger an endpoint scan in Palo Alto Networks Cortex XDR.
Cisco Managed
This workflow appears in the pivot menu and allows a user to unisolate an endpoint in Palo Alto Networks Cortex XDR.