Match the alert source with its role in Cortex XSIAM:
Alert Source
A) Correlation
B) IOC
C) BIOC
D) XDR Agent
Role
1. Connects multiple alert sources
2. Matches known indicators
3. Identifies suspicious behavior from endpoints
4. Collects and sends endpoint telemetry
Response:

What forensic data is most useful for determining malware persistence on a host?
Response:

What triggers the automatic creation of an incident in Cortex XSIAM?
Response:

What can incident context data reveal to the analyst?
Response:

Which feature enables incident responders to directly respond from within Cortex XSIAM?
Response: