When using the "File Search and Destroy" feature, which of the following search hash type is supported?

The correct answer is A. SHA256 hash of the file. https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator- Guide/Search-and-Destroy-Malicious-Files To search by hash, enter the file SHA256 value. When you search by hash, you can also search for deleted instances of this file on the endpoint.

Submitted by omar99· Apr 18, 2026Investigation and Response

Question

Options

ASHA256 hash of the file
BAES256 hash of the file
CMD5 hash of the file
DSHA1 hash of the file

How the community answered

(19 responses)

A
89% (17)
B
5% (1)
D
5% (1)

Explanation

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator- Guide/Search-and-Destroy-Malicious-Files To search by hash, enter the file SHA256 value. When you search by hash, you can also search for deleted instances of this file on the endpoint.

Topics

#Cortex XDR features#File Search and Destroy#Hashing algorithms#Response actions

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice