Which Incident View widget shows the parent-child relationship of related security events?

Which Incident View widget shows the parent-child relationship of related security events?
A . The Incident Summary Widget
B . The Process Lineage Widget
C . The Events Widget
D . The Incident Graph Widget

View Answer

Answer: B

Explanation:

The Process Lineage Widget in the Incident View of Symantec Endpoint Security provides a visual representation of the parent-child relationship among related security events, such as processes or activities stemming from a primary malicious action. This widget is valuable for tracing the origins and propagation paths of potential threats within a system, allowing security teams to identify the initial process that triggered subsequent actions. By displaying this hierarchical relationship, the Process Lineage Widget supports in-depth forensic analysis, helping administrators understand how an incident unfolded and assess the impact of each related security event in context.