The correct answers areA (Feed Integration settings)andB (Classification & Mapping tab).
Feed Integration settings:Mapping of indicator fields can be configured directly within the feed integration configuration, allowing incoming threat intelligence feeds to be parsed and mapped correctly to XSIAM fields.
Classification & Mapping tab:This tab is available in various integration and indicator settings, enabling detailed field mapping and classification logic for incoming indicators.
"Mapping for indicators can be set within the Classification & Mapping tab or during Feed Integration setup to ensure proper parsing and normalization."
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit