Refer to the exhibit.
Based on the investigation view displayed in the exhibit, which two statements about this event are true?
A checkmark in the Exception status indicates that an exception was created for the incident. The presence of one raw-data item indicates that the underlying raw event data is displayed in the stacks investigation view. FileZilla execution does not establish that an exfiltration-prevention policy blocked the event, and endpoint isolation is a separate remediation action.
Community Discussion