cytool.exe
allows to disable the agent and/or Cortex XDR. PS: C:\Program Files\Palo Alto Networks\Traps> .\cytool.exe runtime query Service State cyverak Running cyvrmtgn Running cyvrfsfd Running cyserver Running tedrdrv Running telam Stopped
cytool.exe protect query
checks and controls the Service Protection status on the endpoint.