Scribd
Upload
109 views10 pages

Cortex Session - Management Console

The Cortex XDR Management Console provides tools for monitoring endpoints, customizing dashboards and reports, and managing detection rules. Key sections include Dashboards & Reports for viewing widgets, reports, and customizing dashboards; and Endpoints for viewing details on managed systems. Dashboards can be customized and reports generated based on templates, which can be created from dashboards or defined from scratch. The Widget Library allows creating and editing custom widgets. The Endpoint page displays information for each managed system.

Uploaded by

rayjoneske
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
109 views10 pages

Cortex Session - Management Console

The Cortex XDR Management Console provides tools for monitoring endpoints, customizing dashboards and reports, and managing detection rules. Key sections include Dashboards & Reports for viewing widgets, reports, and customizing dashboards; and Endpoints for viewing details on managed systems. Dashboards can be customized and reports generated based on templates, which can be created from dashboards or defined from scratch. The Widget Library allows creating and editing custom widgets. The Endpoint page displays information for each managed system.

Uploaded by

rayjoneske
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 10

AFRICAN GUARANTEE FUND

RISK REPORT
Sheldon Aswani

System Security Consultant

Management Console
25/08/2023
W W W .BITD E F E N D E R .C O
M
Cortex XDR Management Console Overview
The Navigation Pane
- The main sections of the navigation pane are Dashboard &
Reports,
- Incident Response
- Detection Rules
- Assets and
- Endpoints

You can add a page that is often visited to the Favorites section by
Clicking the star icon to the left of the link

For configuration and session security settings, they are located in


the Settings > Configurations
Dashboards and Reports Page
The Dashboards & Reports section provides access to out-of-the-box and customization functionality for dashboards and reports.
Dashboards and Reports Page
The Main Components of Dashboards & Reports include:
1. Dashboard – Contains widgets that summarize information about endpoints in graphical or table format.
2. Reports – You can view existing reports that have been run in the reports section.
3. Dashboards Manager – Used to set the default dashboard or custom create new ones
4. Reports Template – You can create new report templates or edit existing ones
5. Widget Library - displays existing default widgets and custom widgets

Customize Dashboards Manager and Create a Report Template


You can view custom and default dashboards in Dashboards & Reports > Customize > Dashboards Manager. You can edit, disable,
duplicate, or delete dashboards from the Dashboards Manager section.

You can create a report template in two ways: saving an existing dashboard report as a template from the Dashboards Manager or creating a
report template from scratch.
Dashboards and Reports Page
To create a report based on a dashboard, select Report > Dashboards Manager. Right-click the dashboard from which you want to generate a
report and select Save as report template.
Dashboards and Reports Page
Generate a Report:
You can generate a report once a report template is created from a dashboard or from scratch. To generate a report:

Select Dashboards & Reports > Customize > Reports Templates.

Right click on a report and click Generate Report. You can either Generate Report to run the report on demand, or you can edit the report
template to define a schedule.

After your report completes, you can download it from the Dashboard & Reports > Reports page.
Dashboard & Reports: Widget Library

You can search for widgets, create new widgets, and edit custom widgets. To
create a custom one, follow the below steps:

Step 1: Create Custom Widget

You can use the XML Helper to customize the XML commands. For example:
filter actor_process_image_name in ("powershell.exe", "wscript.exe")

Step 2: Add Name and Description

Step 3: Save Widget

Step 4: Locate Widget


Endpoint Management
In the Cortex XDR management console, a managed endpoint is any system where a Cortex XDR agent is installed and registered. After the
Cortex XDR agent is installed on an endpoint, the agent connects to the Cortex XDR instance, requests a license, and then registers itself as a
licensed product.

Navigating the Endpoint Page:


The All Endpoints page allows you to get more information about the managed endpoints.
Endpoint Management
Endpoint Information Pane
Click an endpoint in the list to open a side-pane containing additional
endpoint information.

Tab Sections:
Click the tabs on the information pane for information about endpoint
details, agent details, network, and policy.

Applicable Actions
Hover over the icons in the top right of the information pane for applicable
actions, such as asset view and view related information.

You might also like