For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XDR Agent

Third-party Windows security applications

Application Name
Limitations

CrowdStrike Falcon

Note that there may be performance implications that cannot be predicted due to usage of multiple applications simultaneously.

Microsoft Defender

If a Cortex XDR agent is running alongside Microsoft Defender on endpoints running Windows Server editions, we recommend setting Defender to Passive mode. Note that there may be performance implications that cannot be predicted due to usage of multiple applications simultaneously.

Trellix McAfee Solidcore/Solidifier

Running exploit protection and Solidcore/Solidifier in parallel is not supported. All other malware protection functionality—such as local analysis, WildFire analysis, and restriction rules—works as expected. Note that there may be performance implications that cannot be predicted due to usage of multiple applications simultaneously.

SentinelOne Singularity XDR

Note that there may be performance implications that cannot be predicted due to usage of multiple applications simultaneously.

Last updated

Was this helpful?