Where should a Security Analyst click to view them?

While on the Offense Summary page, a specific Category of Events associated with the Offense can be investigated.

Where should a Security Analyst click to view them?
A . Click on Events, then filter on Flows
B . Highlight the Category and click the Events icon
C . Scroll down to Categories and view Top 10 Source IPs
D . Right Click on Categories and choose Filter on Network Activity

Answer: B

Explanation:

Reference: IBM Security QRadar SIEM Users Guide. Page: 42

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments