Which feature terminates a process during an investigation?

The correct answer is B. Live Terminal. In Cortex XSIAM, the Live Terminal feature allows analysts to initiate an interactive command-line session with an endpoint directly from the management console. During an investigation, analysts can use Live Terminal to issue commands--including those that terminate suspicious…

Incident Investigation and Response

Question

Options

AResponse Center
BLive Terminal
CExclusion
DRestriction

How the community answered

(51 responses)

A
6% (3)
B
88% (45)
C
2% (1)
D
4% (2)

Explanation

In Cortex XSIAM, the Live Terminal feature allows analysts to initiate an interactive command-line session with an endpoint directly from the management console. During an investigation, analysts can use Live Terminal to issue commands--including those that terminate suspicious or malicious processes running on the endpoint. "Live Terminal provides analysts with a direct command line on the endpoint, enabling actions such as process termination during investigations."

Topics

#process termination#Live Terminal#endpoint response#investigation actions

Community Discussion

No community discussion yet for this question.

Full XSIAM-ANALYST Practice