SecOps ProDemo

By Palo Alto Networks · Question Mode

QuestionQ88

Cortex XDR

An administrator configured Cortex XDR to ingest logs from third-party firewalls and uses Cortex XDR agents on endpoints. The objective is to view network connections from the firewalls correlated with the endpoint processes that initiated them.

Which feature performs this correlation to create network stories?

  • A Identity Analytics
  • B Pathfinder
  • C Log stitching
  • D Correlation rules
Explanation

Log stitching correlates firewall network logs with endpoint raw data across detection sensors, unifying records of the same session into a network story and identifying the processes associated with network connections.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!