How can the analyst achieve this?

An analyst has been asked to present a report of all the incidents that have been detected by QRadar in the last 24 hours.

How can the analyst achieve this?
A . Create an Event saved search from the last 24 hours and then using the Reports tab, create a report to make use of the existing saved search.
B . Create a Common saved search from the last 24 hours and then using the Reports tab, create a report to make use of the existing saved search.
C . Create an Event saved search from the last 24 hours and then using the Log Activity tab, create a report to make use of the existing saved search.
D . Create an Offense saved search from the last 24 hours and then using the Reports tab, create a report to make use of the existing saved search.

Answer: A

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments