Cortex XDR Agent Uninstall Administrative Action

Lucas Pinho@lucaslapinho

•updated Aug 17, 2026•0•0•1

Detects completed administrative actions associated with uninstalling the Cortex XDR endpoint agent. This operation significantly reduces security visibility and defense capabilities on the affected device and requires verification as an authorized action.