What is the primary purpose of using building blocks in SIEM rule configuration?

What is the primary purpose of using building blocks in SIEM rule configuration?
A . To serve as standalone alert conditions
B . To provide reusable components for complex rule creation
C . To increase the processing time of rules
D . To act as the primary alerting mechanism

Answer: B

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments