XSIAM EngineerDemo

By Palo Alto Networks · Question Mode

QuestionQ81

Integration and Automation

What two benefits does alert field mapping provide in correlation rules?

Choose two
  • A It improves incident grouping logic.
  • B It contributes alert data to analytics baselines.
  • C It correlates alert data with other data sources.
  • D It lists the artifacts and assets in the incident.
Explanation

Alert field mappings improve the logic used to group alerts into incidents and allow incidents to list artifacts and assets from the mapped fields.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!