Exam4Training

What can an analyst use in QRadar to quickly find information about IP addresses and URLs while analyzing an offense or event?

What can an analyst use in QRadar to quickly find information about IP addresses and URLs while analyzing an offense or event?
A . Export the Event to CSV and upload it to reputation sites.
B . Verify if the IP address of URL is in any of your reference sets.
C . Use the X-Force Exchange lookup plugin.
D . Copy the IP address or URL and paste it in any external reputation site.

Answer: C

Exit mobile version