Which of the following threat intelligence types can ES download? (Choose all that apply)
Which of the following would allow an add-on to be automatically imported into Splunk Enterprise Security?
Which of the following actions can improve overall search performance?
What does the risk framework add to an object (user, server or other type) to indicate increased risk?
