XSIAM-ANALYST · Question #58
An on-demand malware scan of a Windows workstation using the Cortex XDR agent is successful and detects three malicious files. An analyst attempts further investigation of the files by…
The correct answer is B. The malware scan action detects malicious files but does not generate alerts for them. On-demand scan findings are reported in the scan results but don't create Cortex XSIAM/XDR alerts, so "View related alerts" returns none.
Question
An on-demand malware scan of a Windows workstation using the Cortex XDR agent is successful and detects three malicious files. An analyst attempts further investigation of the files by right-clicking on the scan result, selecting "Additional data," then "View related alerts," but no alerts are reported. What is the reason for this outcome?
Options
- AThe malicious files were false positives and were automatically removed from the scan results.
- BThe malware scan action detects malicious files but does not generate alerts for them.
- CThe malicious files were true positives and were automatically quarantined from the scan results.
- DThe malicious files are currently in an excluded directory in the Malware Profile.
How the community answered
(53 responses)- A13% (7)
- B79% (42)
- C6% (3)
- D2% (1)
Explanation
On-demand scan findings are reported in the scan results but don't create Cortex XSIAM/XDR alerts, so "View related alerts" returns none.
Topics
Community Discussion
No community discussion yet for this question.