A.Creating IOC suppression lists

B.Querying telemetry data using structured commands

C.Validating SOC analyst performance

D.Managing firewall rules

A.Indicator Graph

B.Link context

C.IOC score

D.Timeline path

A.Isolate the endpoint from the network

B.Block the asset's MAC address

C.Reassign it to a different SOC queue

D.Perform a malware scan on the asset

A.Run endpoint file retrieval

B.Enable USB ports

C.Retrieve registry hives

D.Deactivate local firewall