XSOAR-Engineer Exam Dumps - Paloalto Networks Security Operations Questions and Answers

Layouts override classification and mapping

New tabs can be added to the incident layout

Layouts can display incident information and custom fields

Layouts add or remove custom fields from an incident type

Work Plan

Related Incidents

War Room

Context Data

Create a custom indicator field named ‘username’ and link it to the internal system indicator

Change the reputation command for the internal system indicator type

Create a new indicator type of the internal username and set a formatting script to extract only theusername

Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

can run on multiple docker containers

can be set to run on a scheduled basis in the automation settings

can be password protected

can be written in C++

Indicators

Incidents

Reports

Fields

!incidentSet description="Confirmed Phishing"

/incidentSet description=Confirmed Phishing

!setIncident description="Confirmed Phishing"

/setIncident description=Confirmed Phishing

The integration’s source code

A summary of each version history

A test instance for the content pack

The source code of each playbook

Summary

Compiler

Schedule

Run On

In the instance settings, enable the fetch incidents parameter and wait for one minute

Create a one task playbook with a fetch-incident command

execute !-fetch

execute !-fetch

Run Command, Export, and Close and Delete for all selected incidents regardless of their status

Assign, Edit, and Mark as Duplicate for all selected incidents regardless of their status

Run Command for all selected incidents having Active status

Export incidents as JSON and change incident status