Which of the following are examples of sources for events in the endpoint security domain dashboards?
When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?
What feature of Enterprise Security downloads threat intelligence data from a web server?
'The Threat Intelligence Framework provides a modular input (Threat Intelligence Downloads) that handles the majority of configurations typically needed for downloading intelligence files & data. To access this modular input, you simply need to create a stanza in your Inputs.conf file called ''threatlist''.'
The Remote Access panel within the User Activity dashboard is not populating with the most recent hour of dat
a. What data model should be checked for potential errors such as skipped searches?
