The Administrator of an IBM Security QRadar SIEM V7.2.8 deployment needs to determine which rules are most active in generating offenses.
How would the Administrator accomplish this from the Offenses tab of the QRadar console?
A . Rules -> Group -> “Most Active Offenses”.
B . Rules -> Rules -> Offense Count to reorder the column in descending order.
C . All Offenses -> All Offenses -> Offense Count to reorder the column in descending order.
D . All Offenses -> All Offenses -> Events to reorder the column in descending order. Use the Actions menu to view the rule information for a specific offence.
Answer: B
Explanation: