An administrator selects the Discovered Items list in the ICDm to investigate a recent surge in suspicious file activity. What should an administrator do to display only high-risk files?
In theDiscovered Items listwithin the ICDm (Integrated Cyber Defense Manager), the administrator shouldapply a list filterto display only high-risk files. List filters allow administrators to refine displayed results based on specific criteria, such as threat level, enabling focused analysis on high-risk items.
How List Filters Help in Investigations:
Applying a filter for high-risk items ensures that the administrator can concentrate on the most critical threats first, optimizing the investigation process and enabling prompt response.
Why Other Options Are Less Effective:
List control(Option A) andsearch rule(Option B) do not apply here, as they are not filtering mechanisms in the Discovered Items list.
Search modifier(Option C) may refine search terms but does not provide the same targeted filtering functionality as a list filter.
References: Using list filters is a standard practice in ICDm to efficiently narrow down threat items based on risk levels.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit