When viewing the incident directly, what is the "assigned to" field value of a new Incident that was just reported to Cortex?

The correct answer is C. Unassigned. The "assigned to" field value of a new incident that was just reported to Cortex is "Unassigned". This means that the incident has not been assigned to any analyst or group yet, and it is waiting for someone to take ownership of it. The "assigned to" field is one of the default…

Incident Management and Investigation

Question

Options

APending
BIt is blank
CUnassigned
DNew

How the community answered

(31 responses)

A
16% (5)
B
6% (2)
C
74% (23)
D
3% (1)

Explanation

The "assigned to" field value of a new incident that was just reported to Cortex is "Unassigned". This means that the incident has not been assigned to any analyst or group yet, and it is waiting for someone to take ownership of it. The "assigned to" field is one of the default fields that are displayed in the incident layout, and it can be used to filter and sort incidents in the incident list. The "assigned to" field can be changed manually by an analyst, or automatically by a playbook or

Topics

#incident management#assignment status#Cortex XDR console#incident triage

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice