TechWatchAlert
Fleet and cloud

Palo Alto Cortex XDR

Endpoints protected by Cortex XDR join the fleet, with their agent version.

What the connector does

The Cortex XDR connector reads endpoints with a standard API key with the “Viewer” role: name, OS, addresses, last seen and the version of the Cortex XDR agent, itself monitored.

What comes into TechWatchAlert

  • Endpoints: name, OS, addresses, last seen
  • Each endpoint's Cortex XDR agent version

Setup

  1. In Cortex XDR, create a “Standard” API key with the “Viewer” role
  2. Copy the key ID, the key and the API URL
  3. In TechWatchAlert, enter these three values

In the same family

Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France