What can an analyst use in QRadar to quickly find information about IP addresses and URLs while analyzing an offense or event?

exams C1000-163 C1000-163 exam 0 Comments

What can an analyst use in QRadar to quickly find information about IP addresses and URLs while analyzing an offense or event?
A . Export the Event to CSV and upload it to reputation sites.
B . Verify if the IP address of URL is in any of your reference sets.
C . Use the X-Force Exchange lookup plugin.
D . Copy the IP address or URL and paste it in any external reputation site.

Answer: C