What are two key characteristics of alerts generated from third-party integrations in Cortex XDR?

The correct answer is B. They are tagged as "external" C. They can be used in alert stitching. Third-party alerts are identified as external sources and can participate in alert stitching to correlate related activity, but they do not replace native alerts or always trigger remediation.

Third-Party Integrations and Data Sources

Question

Options

AThey always trigger automated remediation
BThey are tagged as "external"
CThey can be used in alert stitching
DThey replace native agent alerts

How the community answered

(30 responses)

A
20% (6)
B
73% (22)
D
7% (2)

Explanation

Third-party alerts are identified as external sources and can participate in alert stitching to correlate related activity, but they do not replace native alerts or always trigger remediation.

Topics

#third-party integrations#external alerts#alert stitching#Cortex XDR

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice