Based on the image below, what will be the type of this new incident?

The correct answer is A. Cortex XDR Incident - Quasar. In the classifier configuration shown, the field incident_type has the value "Cortex XDR Incident - Quasar", and this exact value is mapped to the incident type "Cortex XDR Incident - Quasar" on the right side. Therefore, when this data is ingested, the resulting incident will…

Incident Management and Configuration

Question

Exhibit

Options

ACortex XDR Incident - Quasar
BCortex XDR Incident
CUnclassified
DDefault

How the community answered

(24 responses)

A
96% (23)
C
4% (1)

Explanation

In the classifier configuration shown, the field incident_type has the value "Cortex XDR Incident - Quasar", and this exact value is mapped to the incident type "Cortex XDR Incident - Quasar" on the right side. Therefore, when this data is ingested, the resulting incident will be created with that

Topics

#incident classification#classifier#incident type mapping#Cortex XDR

Community Discussion

No community discussion yet for this question.

Full XSOAR-ENGINEER Practice