Which Cortex XDR capability allows for the immediate termination of a process discovered during investigation of a security event?
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
Which service helps uncover attackers wherever they hide by combining world-class threat hunters with Cortex XDR technology that runs on integrated endpoint, network, and cloud data sources?
Which two entities can be created as a behavioral indicator of compromise (BIOC)? (Choose two.)
Which two actions are required to add indicators to the whitelist? (Choose two.)
A Cortex XSOAR customer wants to ingest emails from a single mailbox. The mailbox brings in reported phishing emails and email requests from human resources (HR) to onboard new users. The customer wants to run two separate workflows from this mailbox, one for phishing and one for onboarding.
What will allow Cortex XSOAR to accomplish this in the most efficient way?
Which service helps identify attackers by combining world-class threat intelligence with Cortex XSIAM technology?
