Free Preparation Discussions
MENU
Palo Alto Networks XDR-Analyst Exam - Topic 1 Question 7 Discussion
Topic #: 1
Which type of IOC can you define in Cortex XDR?
Cortex XDR allows you to define IOC rules based on various types of indicators of compromise (IOC) that you can use to detect and respond to threats in your network. One of the types of IOC that you can define in Cortex XDR isdestination IP address, which is the IP address of the remote host that a local endpoint is communicating with. You can use this type of IOC to identify malicious network activity, such as connections to command and control servers, phishing sites, or malware distribution hosts. You can also specify the direction of the network traffic (inbound or outbound) and the protocol (TCP or UDP) for the destination IP address IOC.Reference:
Cortex XDR documentation portal
Is there a possibility to create an IOC list to employ it in a query?
Cortex XDR Datasheet
Sharan
14 hours agoKatheryn
6 days agoWilda
11 days agoMica
16 days agoEdna
21 days agoBok
26 days agoTracey
1 month agoAmos
1 month agoDylan
1 month agoNovella
2 months agoTarra
2 months agoStephanie
2 months agoMarleen
2 months agoLevi
4 months agoKristofer
4 months agoJanae
4 months agoAnnita
4 months agoPansy
4 months agoJody
4 months agoJacquelyne
5 months agoMozell
5 months agoMargurite
5 months agoHerminia
5 months agoAshlee
5 months agoBlair
5 months ago