QuestionQ16

VerifiedRules and subpatterns

Refer to the exhibit.

Question Image

What does the value Group: Windows refer to?

Explanation

For a Source IP event-attribute filter, Group: Windows denotes a CMDB device group: the filter matches events whose source IP belongs to a device in the Windows group. FortiSIEM supports defining device groups by IP address, host name, device type, and custom properties.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!