QuestionQ80

Cortex XSIAM

What is the purpose of a Causality View?

  • A To provide users access to collaborate and execute CLI commands in Cortex XDR and Cortex XSIAM
  • B To present the alerts and process execution chain of all activity pertaining to the same event
  • C To consolidate multiple security tools into a single interface to improve analyst productivity
  • D To present alerts from multiple data sources as individual incidents in the console
Explanation

A Causality View correlates related alerts and displays the associated process-execution chain for activity connected to the same event.

Community Discussion

No comments yet. Be the first to start the discussion!