Only do this if you're unable to update Cortex via SCCM or via the Palo Alto web portal https://login.paloaltonetworks.com/. Cortex has an anti-tampering system and cannot be uninstalled normally.
- Sign into the computer that you're trying to uninstall Cortex from.
- Navigate to the Cortex Agent Cleaner: \\mopt.vic.gov.au\Public\Deploy\CortexXDR\XdrAgentCleaner.
- Run the XdrAgentCleaner.exe program from the shared folder as admin.
- Sign in with your administrator credentials.
- When prompted, click Yes to uninstall.
- You will then be prompted for an uninstall password, enter the password found in Dashlane under the name: Palo Alto Traps Agent.
- Once entered, Cortex will be uninstalled.
- After uninstalling Cortex, install the latest version as soon as possible from: \\mopt.vic.gov.au\Public\Deploy\CortexXDR or via the web portal found via: https://login.paloaltonetworks.com/