Which term should an analyst select when the task is to explain how XSIAM creates incidents from alert activity during initial triage?

Question

Accepted Answer

C. Incident creation process. Incident creation process is correct because the official Palo Alto Networks XSIAM Analyst datasheet maps it to incident creation process. That makes it the best fit when the analyst needs to explain how XSIAM creates incidents from alert activity during initial triage. Leads is not correct because it addresses a different requirement within Incident Handling and Response.

Which term should an analyst select when the task is to explain how XSIAM creates incidents from alert activity during initial triage?

Related Questions

Discussion