NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

Question

You are creating a rule to address a gap in your organization’s MITRE ATT&CK rule-coverage matrix.

How can you associate the rule with an appropriate tactics, techniques, and procedures (TTP) category?

Explanation

FortiSIEM maps a rule to MITRE ATT&CK by selecting the appropriate technique in the rule’s Define Action settings; the related tactics update automatically. The Rule Coverage view reports those rule-level mappings rather than serving as the place to create them.

Learn more

NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

AstroTutor

Notes

Readiness

QuestionQ54

Community Discussion