What is the purpose of the Cortex Data Lake?
To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:
Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View
PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view
Tamar
3 months agoFrancesco
3 months agoChandra
3 months agoYolando
4 months agoFelicidad
4 months agoTess
4 months agoTammara
4 months agoCraig
4 months agoAlberto
5 months agoGladys
5 months agoDortha
5 months agoEric
5 months agoShenika
5 months agoCharlena
10 months agoLai
9 months agoOctavio
9 months agoAlana
10 months agoLuis
10 months agoAide
10 months agoBrittni
9 months agoMose
9 months agoKristal
10 months agoVanda
10 months agoRodrigo
10 months agoLavonda
10 months agoMyrtie
10 months agoFatima
10 months agoAnissa
10 months agoEmilio
11 months agoAnissa
11 months ago