At what stage during the incident lifecycle is an incident type assigned?
What are the out-of-the-box aggregate values that can be applied on widgets data?
How would context data be filtered to receive only malicious indicator values with DBotScore?
Assuming an incident type configuration runs the associated playbook automatically, which pre-process rule action can preserve matching incidents without triggering the playbook?.
An engineer must create a playbook task which asks a user a single question to determine the next step in the playbook flow.
Which type of task will accomplish this goal?.
Which two solutions are available to scale an overloaded XSOAR environment? (Choose two.)
To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?
Which feature is used to convert event data values into incident fields when an integration fetches an event?.
Which Marketplace content pack will allow sharing of threat intelligence in STIX format?.
