Which solution will minimize mean time to resolution (MTTR) when, as a result of previous malware infection, a company’s Windows endpoint is suffering a small amount of file corruption and modified registry keys?
A.
Issue a new laptop from the help desk to expedite a clean system.
B.
Use Live Terminal to connect to the machine and upload files to replace the corrupted files.
C.
Use group policy objects to push new files and registry key changes to the endpoint.
D.
Use remediation suggestions to restore the affected files and registry modifications.
Cortex XDR includes a powerful feature designed specifically to reduce MTTR (Mean Time to Resolution) after a security incident: Remediation Suggestions .
Automated Rollback: When Cortex XDR analyzes an incident, it identifies every change the malicious process made—including files created, registry keys modified, and processes spawned.
Efficiency: Instead of manual rebuilding (Option A) or manual scripting (Option B), the analyst can simply review the "Remediation Suggestions" in the Incident view and click "Apply." This automatically deletes malicious files and restores registry keys to their original state.
Speed: This is the fastest way to return a system to its "Known Good" state without the overhead of hardware replacement or complex GPO deployments (Option C).
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit