Câu 36: PCSAE: Palo Alto Networks Certified Security Automation Engineer

An engineer's organization system is registered in the following manner: . The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate `˜User' indicator automatically once a system is found. What is the most efficient way for the engineer to achieve this?

1. A. Create a custom indicator field named 'username' and link it to the internal system indicator
2. B. Change the reputation command for the internal system indicator type — đáp án hiện tại
3. C. Create a new indicator type of the internal username and set a formatting script to extract only the username
4. D. Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning