The Cortex XDR app for Android prevents known malware
and unknown APK files from running on your Android endpoints. The
Cortex XDR app enforces your organization’s security policy as defined
in Cortex XDR. The security policy determines whether to block known
malware and unknown files (recommended), upload unknown files for
in-depth inspection and analysis, treat malware as grayware, and
perform local analysis to determine the likelihood an unknown file
is malware. You can also whitelist trusted signers to enable unknown
apps that are signed to run before Cortex XDR receives an official verdict
for the app.