NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ18

VerifiedRules and subpatterns

What are the two required components of a rule?

Choose two
Explanation

A FortiSIEM rule requires a detection technology to specify its detection method and a subpattern to define the event characteristics and thresholds that trigger an incident. Tags and clear conditions are optional configuration settings.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!