Is there any additional documentation (blogs, webinars, etc) beyond Microsoft Windows Endpoint Target (cisco.com) on how to set up a Windows Endpoint target in XDR?  Is it possible to target internal endpoints?  I am under the impression that it woul...

The HTTP Request fails when trying to query our secure email appliance using the subjectfilterValue parameter of a subject that contains an &, i.e subject is "Foo & Bar."   /sma/api/v2.0/message-tracking/messages?searchOption=messages&ciscoHost=All_H...

Hi, within XDR I can conduct message remediation by pivoting off of a Cisco Message ID (MID):However I cannot seem to find any documentation detailing how to conduct message remediation with the API (PUT or POST with a list of MIDs) so I can incorpor...

Is there a way to safelist or create an exclusion for this benign powershell command without safelisting cmd.exe or powerhell.exe - just the actual Command parameter?  These events are classified as "Command Obfuscation With Symbols" compromises and ...