What is the purpose of data stitching in Cortex XSIAM?
Response:

You're tasked with building a report for daily alert trends. Which XQL features will support this automation?
(Choose two)
Response:

What is the role of importing indicators into Cortex XSIAM?
Response:

Matching - Threat Intelligence Action to Outcome
Action
A) Import indicator list
B) Set verdict to malicious
C) Build detection rule
D) Create indicator relationship
Outcome
1. Adds IOCs for detection/prevention
2. Enables blocking and alert generation
3. Triggers alert on indicator match
4. Visualizes contextual links
Response:

Match each part of the XQL data structure with its role:
Component
A) Syntax
B) Schema
C) Data Source
D) Fields
Description
1. Defines query grammar
2. Describes fields and data types
3. Specifies telemetry dataset to use
4. Selects specific data to be returned
Response: