Scripts

XDR 스크립트 라이브러리

Total: 14
Script List
ID Name Description Risk Platforms Created By Modified
6 process_get
956e8989f67ebcb2c71c4635311e47e4 		Get running processes (CPU and Memory) from endpoint Standard Palo Alto Networks 2025-12-23 16:57
7 process_kill_cpu
3d928a24f61cd3c1116544900c424098 		Kill all processes with a CPU usage higher than specified High Risk Palo Alto Networks 2025-12-23 16:57
8 process_kill_mem
87d4547df6d4882a3c006ec58c3b8bf4 		Kill all processes with a RAM usage higher than specified High Risk Palo Alto Networks 2025-12-23 16:57
9 process_kill_name
fd0a544a99a9421222b4f57a11839481 		Kill processes by name High Risk Palo Alto Networks 2025-12-23 16:57
10 registry_delete
ad36488a20cdbdd1604ec4bec9da5c41 		Delete registry value or delete registry key with all its values High Risk Palo Alto Networks 2025-12-23 16:57
11 registry_get
699fa2e98ab1eb5677489dce54125769 		Get registry value data and its type Standard Palo Alto Networks 2025-12-23 16:57
12 registry_set
896392a13b2ef0ae75b3f2396125037d 		Set registry value High Risk Palo Alto Networks 2025-12-23 16:57
13 status_package
dc5815bb786f4cc095671f3150717fc8 		Get useful system information from the endpoints Standard Palo Alto Networks 2025-12-23 16:57
14 test_acs
46f9631225bfbde2374c118ac9158def 		Test ACS signature validation support Standard Palo Alto Networks 2025-12-23 16:57
1 delete_file
548023b6e4a01ec51a495ba6e5d2a15d 		Delete a file by path High Risk Palo Alto Networks 2025-12-23 16:57
2 enable_windows_event_logs
086787c69fabf104fa80ad9bc8eea705 		Enables Windows Event Logs used by Cortex XDR. Standard Palo Alto Networks 2025-12-23 16:57
3 execute_commands
a6f7683c8e217d85bd3c398f0d3fb6bf 		Execute list of shell commands High Risk Palo Alto Networks 2025-12-23 16:57
4 file_exists
414763381b5bfb7b05796c9fe690df46 		Check if file exists on the endpoint Standard Palo Alto Networks 2025-12-23 16:57
5 list_directories
43973479d389f2ac7e99b6db88eaee40 		List all directories under path Standard Palo Alto Networks 2025-12-23 16:57
Note: 스크립트 실행은 2차 구현(실행/조치 API) 단계에서 진행됩니다.