XSOAR-ENGINEER · Question #23
Which two features can be used together to automatically execute a search on a remote SIEM for extracted IP Indicators? (Choose two.)
The correct answer is B. Enhancement script C. Integration command. An enhancement script can be used to automatically act on extracted indicators (such as IPs), and it can call an integration command to execute a search on a remote SIEM. Together, they enable automated enrichment or investigation workflows directly tied to indicator extraction.
Question
Which two features can be used together to automatically execute a search on a remote SIEM for extracted IP Indicators? (Choose two.)
Options
- AReputation script
- BEnhancement script
- CIntegration command
- DFeed-triggered job
How the community answered
(30 responses)- A3% (1)
- B83% (25)
- D13% (4)
Explanation
An enhancement script can be used to automatically act on extracted indicators (such as IPs), and it can call an integration command to execute a search on a remote SIEM. Together, they enable automated enrichment or investigation workflows directly tied to indicator extraction.
Topics
Community Discussion
No community discussion yet for this question.