Which attributes can be used as featured fields?

Question

Options

• ADevice-ID, URL, port, and indicator
• BCIDR range, file hash, tags, and log source
• CEndpoint-ID, alert source, critical asset, and threat name
• DHostnames, user names, IP addresses, and Active Directory

• A
  5% (2)
• B
  3% (1)
• C
  5% (2)
• D
  86% (32)

Explanation

Featured fields are meant to surface key entities - machines, users, network addresses, and directory objects - so attributes like hostnames, user names, IPs, and AD items are supported for that purpose.

No community discussion yet for this question.