Which Type of IOC can you define in Cortex XDR?

The correct answer is C. full path. Cortex XDR allows you to define IOCs based on various criteria, such as file hashes, registry keys, IP addresses, domain names, and full paths. A full path IOC is a specific location of a file or folder on an endpoint, such as C:\Windows\System32\calc.exe. You can use full path…

Threat Intelligence and IOC Management

Question

Options

Adestination port
Be-mail address
Cfull path
DApp-ID

How the community answered

(22 responses)

A
5% (1)
B
5% (1)
C
77% (17)
D
14% (3)

Explanation

Cortex XDR allows you to define IOCs based on various criteria, such as file hashes, registry keys, IP addresses, domain names, and full paths. A full path IOC is a specific location of a file or folder on an endpoint, such as C:\Windows\System32\calc.exe. You can use full path IOCs to detect and respond to malicious files or folders that are located in known locations on your

Topics

#IOC types#indicators of compromise#full path#threat intelligence

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice