When an organization needs to detect a specific behavior that is unique to their environment, they can create a Custom IOA. Which of the following is NOT required when configuring a custom IOA from scratch?
A.
Selecting a Rule Type (e.g., Process Creation).
B.
Specifying the Severity level of the resulting detection.
C.
Assigning a specific host group to the IOA rule at the time of creation.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit