Which of the following are valid use cases for using XQL in Cortex XDR? (Choose two)

The correct answer is B. Hunting for suspicious processes C. Creating custom dashboards. XQL is used for querying telemetry data to hunt threats and to power custom dashboards. It is not used for firewall rule creation or endpoint content automation.

XQL Query and Threat Hunting

Question

Options

ACreating firewall rule templates
BHunting for suspicious processes
CCreating custom dashboards
DAutomating endpoint content updates

How the community answered

(53 responses)

A
13% (7)
B
79% (42)
D
8% (4)

Explanation

XQL is used for querying telemetry data to hunt threats and to power custom dashboards. It is not used for firewall rule creation or endpoint content automation.

Topics

#XQL#threat hunting#custom dashboards#query language

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice