A Prevention Profile in Palo Alto Cortex XDR is a collection of security policy rules that the Cortex XDR agent enforces on endpoints. The two fundamental components configured within these profiles are Malware Protection and Exploit Protection. The Malware Protection module includes settings for Behavioral Threat Protection, ransomware, and various static and dynamic analysis techniques to prevent malicious files and behavior. The Exploit Protection module contains settings to block the techniques used in software exploits, such as memory corruption and logic flaws, thereby preventing attackers from leveraging vulnerabilities in legitimate applications.
