The correct answer isD – Hostnames, user names, IP addresses, and Active Directory.
These are commonly used and supported asfeatured fieldsin Cortex XSIAM for filtering, correlation, and highlighting key data points across incidents and alerts.
"Featured fields can include hostnames, user names, IP addresses, and Active Directory objects for enhanced alert context and searchability."
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit