1
Automation And Playbooks
hard
A SOC team wants its Cortex XSIAM playbooks to enrich and respond to incidents automatically without analyst intervention, but only for incidents that meet strict criteria. Which TWO capabilities allow a playbook to be triggered and controlled automatically based on incident attributes? (Choose two.)
Select 2 answers