QuestionQ16Verified/Rules and subpatternsCopy linkReport a problemAsk AstroTutorSave questionRefer to the exhibit. What does the value Group: Windows refer to?AA Windows Active Directory (AD) user groupBA configuration management database (CMDB) device groupCA SOC analyst groupDA FortiSIEM user groupShow AnswerAnswerExplanationFor a Source IP event-attribute filter, Group: Windows denotes a CMDB device group: the filter matches events whose source IP belongs to a device in the Windows group. FortiSIEM supports defining device groups by IP address, host name, device type, and custom properties.Learn moreFortiSIEM Discovery SettingsShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion