Palo_Alto_Networks
XSIAM-ANALYST · Question #37
What information is provided in the timeline view of Cortex XSIAM?
The correct answer is B. Sequence of events, alerts, rules, and other actions involved over the lifespan of an incident. The Timeline view chronologically lays out everything that happened in the incident - events, alerts, triggered rules, and analyst/system actions - so you can track how it unfolded end to end.
Incident Investigation
Question
What information is provided in the timeline view of Cortex XSIAM?
Options
- AGraphic representation of an event Causality Instance (CI) with additional capabilities to enable
- BSequence of events, alerts, rules, and other actions involved over the lifespan of an incident
- CTab within an incident where analysts can collaborate and initiate further actions and automations
- DDetailed overview of behavior or activity that triggered an Analytics Alert, Analytics BIOC alert, or
How the community answered
(28 responses)- A7% (2)
- B89% (25)
- D4% (1)
Explanation
The Timeline view chronologically lays out everything that happened in the incident - events, alerts, triggered rules, and analyst/system actions - so you can track how it unfolded end to end.
Topics
#Timeline View#Incident Lifecycle#Event Sequence#XSIAM UI
Community Discussion
No community discussion yet for this question.