Câu 5: SPLK-5001: Splunk Certified Cybersecurity Defense Analyst
A Risk Rule generates events on Suspicious Cloud Share Activity and regularly contributes to confirmed incidents from Risk Notables. An analyst realizes the raw logs these events are generated from contain information which helps them determine what might be malicious. What should they ask their engineer for to make t…
Nội dung câu hỏi
A Risk Rule generates events on Suspicious Cloud Share Activity and regularly contributes to confirmed incidents from Risk Notables. An analyst realizes the raw logs these events are generated from contain information which helps them determine what might be malicious. What should they ask their engineer for to make their analysis easier?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. Create a field extraction for this information. — đáp án hiện tại
- B. Add this information to the risk_message.
- C. Create another detection for this information.
- D. Allowlist more events based on this information.
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.