Which CLI query would bring back Notable Events from Splunk?
A)

B)

C)

D)

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?