Hey everyone, I'm relatively new to evaluating security tools like this for our small team. We've been trialing Cortex XDR for about three weeks now on our mixed Mac and Windows environment. Overall, the dashboard and alerting seem powerful, but I'm hitting a snag that's causing some friction with the team.
Specifically, on our Macs (a mix of M1 and Intel MacBook Pros running macOS Sonoma), the Cortex agent seems to be consistently causing high CPU usage. We're seeing processes like `cortexd` or `xdrctl` spiking to 80-90% for extended periods, which is making machines run hot and fans spin up constantly. It's not happening on all Macs, but on enough to be concerning. Our Windows machines are totally fine.
Has anyone else experienced this? I'm trying to figure out:
* Is this a known issue with a specific version of the agent?
* Are there recommended settings or exclusions we should look at on Mac?
* Could it be conflicting with other common Mac apps? We use Little Snitch and have some dev tools installed.
I really want to make this work, but the performance hit is a dealbreaker for my team. I'm a bit overwhelmed trying to sift through all the documentation and support forums on my own. Any insights or shared experiences would be so helpful!
✌️ annie