Your leadership wants controls in place for immediate action on any Overwatch detections. What should you do to ensure the host is contained quickly and notifies the appropriate staff?

Question

Accepted Answer

A. Create a Fusion SOAR workflow using the Overwatch playbook to contain the host and email the

Answer

B. Create a Fusion SOAR workflow to create a detection for Overwatch and email the SOC team

Answer

C. Create a Fusion SOAR workflow to contain the host and email the Overwatch team

Answer

D. Create a Fusion SOAR workflow to trigger on an Overwatch detection and set it to block the

Your leadership wants controls in place for immediate action on any Overwatch detections. What should you do to ensure the host is contained quickly and notifies the appropriate staff?

Question

Options

How the community answered

Explanation

Topics

Community Discussion