PCDRA · Question #63
How can you pivot within a row to Causality view and Timeline views for further investigate?
The correct answer is C. Using the Open Card and Open Timeline actions respectively. Within the Cortex XDR Incidents and Alerts tables, each row provides inline action icons that let analysts pivot into deeper investigation views without leaving the current screen. The 'Open Card' action opens the Causality view (also called the Causality Chain or CGO…
Question
How can you pivot within a row to Causality view and Timeline views for further investigate?
Options
- AUsing the Open Card Only
- BUsing Open Timeline actions Only
- CUsing the Open Card and Open Timeline actions respectively
- DYou can't pivot within a row to Causality view and Timeline views
How the community answered
(42 responses)- A2% (1)
- B7% (3)
- C88% (37)
- D2% (1)
Explanation
Within the Cortex XDR Incidents and Alerts tables, each row provides inline action icons that let analysts pivot into deeper investigation views without leaving the current screen. The 'Open Card' action opens the Causality view (also called the Causality Chain or CGO - Causality Group Owner), which displays the graphical process tree showing how the alert originated. The 'Open Timeline' action opens the Timeline view, showing a chronological sequence of events related to that alert or incident. Both pivots are available per row using their respective actions.
Topics
Community Discussion
No community discussion yet for this question.