What is the maximum number of agents one Broker VM local agent applet can support?
To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:
Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View
PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view
Aja
1 months agoCarisa
1 months agoTheodora
4 days agoJohna
5 days agoEleonora
6 days agoVerdell
9 days agoMarg
16 days agoXuan
19 days agoHyun
22 days agoXochitl
2 months agoJanessa
14 days agoRodney
19 days agoLashawnda
22 days agoDenna
22 days agoKaty
29 days agoZona
1 months agoBernardo
2 months agoHuey
2 months agoCandida
2 months agoLaurel
8 days agoDeandrea
20 days agoJosephine
2 months agoHollis
2 months agoMari
3 months agoBenedict
3 months agoFrance
3 months ago