In which two locations can mapping be configured for indicators? (Choose two.)

The correct answer is A. Feed Integration settings D. Classification & Mapping tab. Feed Integration settings: Mapping of indicator fields can be configured directly within the feed integration configuration, allowing incoming threat intelligence feeds to be parsed and mapped correctly to XSIAM fields. Classification & Mapping tab: This tab is available in…

Threat Intelligence Management

Question

Options

AFeed Integration settings
BIndicator Configuration in Object Setup
CSTIX parser code
DClassification & Mapping tab

How the community answered

(45 responses)

A
87% (39)
B
9% (4)
C
4% (2)

Explanation

Feed Integration settings: Mapping of indicator fields can be configured directly within the feed integration configuration, allowing incoming threat intelligence feeds to be parsed and mapped correctly to XSIAM fields. Classification & Mapping tab: This tab is available in various integration and indicator settings, enabling detailed field mapping and classification logic for incoming indicators.

Topics

#Indicator Mapping#Feed Integration#Classification and Mapping#Threat Intelligence

Community Discussion

No community discussion yet for this question.

Full XSIAM-ANALYST Practice