During Cortex XDR engineering work, an engineer must create or manage BIOC-based detections before production rollout. Which concept or component should they use?

Question

Accepted Answer

C. Behavioral indicators of compromise (BIOCs). Behavioral indicators of compromise (BIOCs) is correct because the official Palo Alto Networks XDR Engineer datasheet maps it to behavioral indicators of compromise (BIOCs). That makes it the best fit when the engineer needs to create or manage BIOC-based detections before production rollout. Reporting templates is not correct because it addresses a different requirement within Detection and Reporting.

During Cortex XDR engineering work, an engineer must create or manage BIOC-based detections before production rollout. Which concept or component should they use?

Related Questions

Discussion