A user selects the New option under Sources on the menu. What will be displayed?
When analyzing events, a working on a case, significant items can be marked as evidence. Where can ail of a case's evidence items be viewed together?
Some of the playbooks on the Phantom server should only be executed by members of the admin role. How can this rule be applied?
Is it possible to import external Python libraries such as the time module?
Some of the playbooks on the SOAR server should only be executed by members of the admin role. How can this rule be applied?
Seventy can be set during ingestion and later changed manually. What other mechanism can change the severity or a container?
Which app allows a user to send Splunk Enterprise Security notable events to Phantom?
When configuring a Splunk asset for Phantom to connect to a SplunkC loud instance, the user discovers that they need to be able to run two different on_poll searches. How is this possible
To limit the impact of custom code on the VPE, where should the custom code be placed?
After a successful POST to a Phantom REST endpoint to create a new object what result is returned?
Which of the following supported approaches enables Phantom to run on a Windows server?
Which of the following is a step when configuring event forwarding from Splunk to Phantom?
Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?
Configuring SOAR search to use an external Splunk server provides which of the following benefits?
What does a user need to do to have a container with an event from Splunk use context-aware actions designed for notable events?
A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?