An analyst is investigating a specific alert in Endpoint Standard. The analyst selects the investigate button from the alert triage page and sees the following: Which statement accurately characterizes this situation?
A.
These events are tied to an observed alert within the user interface.
B.
The policy had no blocking and isolation rules set.
C.
The events shown will all have the same event ID, correlating them to the alert.
D.
Each event listed contributed to the overall alert score and severity.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
amaharu
3 years, 1 month agoamaharu
3 years, 2 months ago