A.Review any PE files that WildFire determined to be malicious

B.Run the VDI conversion tool

C.Set the memory dumps to manual setting

D.Ensure the latest content updates are installed

A.The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.

B.The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.

C.The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console

D.The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console

A.Tell them we can build it with Professional Services.

B.Extend the POC window to allow the solution architects to build it

C.Tell them custom integrations are not created as part of the POC

D.Agree to build the integration as part of the POC

A.Mark as scheduled entry

B.Mark as note

C.Mark as evidence

D.Mark as artifact

A.alert root cause

B.presence of Flash executable

C.OS

D.domain/workgroup membership

E.hostname