The correct answer is A. All . Falcon Next-Gen SIEM is designed to unify first-party Falcon telemetry with third-party ingested data in a single investigation and search experience. When the query needs to include both Falcon Sensor data and third-party connector data, the correct data source selection is the one that includes both categories together, which is All . CrowdStrike describes Next-Gen SIEM as correlating native Falcon data with third-party sources to provide a unified security view.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit