PCDRA · Question #12
Where would you view the WildFire report in an incident?
The correct answer is A. next to relevant Key Artifacts in the incidents details page. In Cortex XDR, when a file is submitted to WildFire for analysis, the resulting verdict and report are surfaced directly in the incident details page alongside the relevant Key Artifacts (such as files or processes that triggered the analysis). This keeps the forensic context…
Question
Where would you view the WildFire report in an incident?
Options
- Anext to relevant Key Artifacts in the incidents details page
- Bunder Response --> Action Center
- Cunder the gear icon --> Agent Audit Logs
- Don the HUB page at apps.paloaltonetworks.com
How the community answered
(48 responses)- A94% (45)
- B2% (1)
- D4% (2)
Explanation
In Cortex XDR, when a file is submitted to WildFire for analysis, the resulting verdict and report are surfaced directly in the incident details page alongside the relevant Key Artifacts (such as files or processes that triggered the analysis). This keeps the forensic context co-located with the artifact. The other options describe different areas of the Cortex XDR console: Action Center is for response actions, Agent Audit Logs track agent activity, and the HUB is the app marketplace.
Topics
Community Discussion
No community discussion yet for this question.