A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to delete. Which…

Question

Options

• AManually remediate the problem on the endpoint in question.
• BOpen X2go from the Cortex XDR console and delete the file via X2go.
• CInitiate Remediate Suggestions to automatically delete the file.
• DOpen an NFS connection from the Cortex XDR console and delete the file.

• A
  9% (4)
• B
  2% (1)
• C
  72% (31)
• D
  16% (7)

Explanation

The best action to delete the file on the Linux endpoint is to initiate Remediation Suggestions from the Cortex XDR console. Remediation Suggestions are a feature of Cortex XDR that provide you with recommended actions to undo the effects of malicious activity on your endpoints. You can view the remediation suggestions for each alert or incident in the Cortex XDR console, and decide whether to apply them or not. Remediation Suggestions can help you restore the endpoint to its original state, remove malicious files or processes, or fix registry or system settings. Remediation Suggestions are based on the forensic data collected by the Cortex XDR agent and the analysis performed by Cortex XDR.

No community discussion yet for this question.