A team is mapping an implementation task to indicators of compromise (IOCs). Which choice best supports the need to create or manage IOC-based detections before production rollout?

Question

Accepted Answer

D. Indicators of compromise (IOCs). Indicators of compromise (IOCs) is correct because the official Palo Alto Networks XDR Engineer datasheet maps it to indicators of compromise (IOCs). That makes it the best fit when the engineer needs to create or manage IOC-based detections before production rollout. Behavioral indicators of compromise (BIOCs) is not correct because it addresses a different requirement within Detection and Reporting.

A team is mapping an implementation task to indicators of compromise (IOCs). Which choice best supports the need to create or manage IOC-based detections before production rollout?

Related Questions

Discussion