What determines the current verdict for an indicator when multiple sources provide different reliability scores and verdicts?

The correct answer is C. Verdict provided by the source with the highest reliability score. XSOAR determines the current verdict for an indicator by prioritizing the verdict from the source with the highest reliability. This ensures that more trusted and accurate sources influence the final decision over less reliable ones.

Threat Intelligence Management

Question

Options

AVerdict provided by the most recently updated source
BAverage verdict score from all sources
CVerdict provided by the source with the highest reliability score
DHighest severity verdict from all sources

How the community answered

(24 responses)

A
4% (1)
C
92% (22)
D
4% (1)

Explanation

XSOAR determines the current verdict for an indicator by prioritizing the verdict from the source with the highest reliability. This ensures that more trusted and accurate sources influence the final decision over less reliable ones.

Topics

#indicator verdict#source reliability#threat intelligence#TIM verdict logic

Community Discussion

No community discussion yet for this question.

Full XSOAR-ENGINEER Practice