Palo_Alto_Networks
XDR-ANALYST · Question #95
Which two elements are part of alert evidence in Cortex XDR? (Choose two)
The correct answer is B. Related process execution D. File hash and signature. Alert evidence includes technical artifacts such as process execution details and file hashes or signatures that help analysts understand how an alert was triggered.
Alert Analysis and Investigation
Question
Which two elements are part of alert evidence in Cortex XDR? (Choose two)
Options
- AIP reputation
- BRelated process execution
- CPlaybook logs
- DFile hash and signature
How the community answered
(37 responses)- A11% (4)
- B84% (31)
- C5% (2)
Explanation
Alert evidence includes technical artifacts such as process execution details and file hashes or signatures that help analysts understand how an alert was triggered.
Topics
#alert evidence#process execution#file hash#alert analysis
Community Discussion
No community discussion yet for this question.