An analyst is investigating a specific alert in Endpoint Standard. The analyst selects the investigate button from the alert triage page and sees the following:Which statement accurately characterizes this situation?
An Analyst Is I 1 (125.92 KiB) Viewed 76 times
A. These events are tied to an observed alert within the user interface.
B. The policy had no blocking and isolation rules set.
C. The events shown will all have the same event ID, correlating them to the alert.
D. Each event listed contributed to the overall alert score and severity.
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!