Where would you view the WildFire report in an incident?

The correct answer is A. next to relevant Key Artifacts in the incidents details page. To view the WildFire report in an incident, you need to go to the incident details page and look for the relevant key artifacts that are related to the WildFire analysis. A key artifact is a piece of evidence that is associated with an alert or an incident, such as a file hash…

Incident Management and Investigation

Question

Options

Anext to relevant Key Artifacts in the incidents details page
Bunder Response --> Action Center
Cunder the gear icon --> Agent Audit Logs
Don the HUB page at apps.paloaltonetworks.com

How the community answered

(33 responses)

A
73% (24)
B
6% (2)
C
18% (6)
D
3% (1)

Explanation

To view the WildFire report in an incident, you need to go to the incident details page and look for the relevant key artifacts that are related to the WildFire analysis. A key artifact is a piece of evidence that is associated with an alert or an incident, such as a file hash, a registry key, an IP address, a domain name, or a full path. If a key artifact is related to a WildFire analysis, you will see a WildFire icon next to it, indicating that there is a WildFire report available for that artifact. You can click on the WildFire icon to view the report, which will show you the detailed information about the artifact, such as the verdict, the behavior, the severity, the signatures, and the

Topics

#WildFire report#incident details#key artifacts#malware analysis

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice